koajs / koa-body

koa body parser middleware
MIT License
947 stars 131 forks source link

Upgrade formidable #200

Open AmauryD opened 2 years ago

AmauryD commented 2 years ago

Problem/Feature Request Summary

Hello,

Do you plan to update the formidable dependency to 3.x ? Formidable 1.x is currently deprecated. I can help if you want.

Thank you

RayJason commented 2 years ago

when I add dependencies:

WARN  deprecated formidable@1.2.6: Please upgrade to latest, formidable@v2 or formidable@v3! Check these notes: https://bit.ly/2ZEqIau
djulen commented 2 years ago

Hello, last month in formidable was found vulnerability issue https://www.mend.io/vulnerability-database/CVE-2022-29622. This issue was fixed in the last version of the library. Do we have a plan to update formidable to the latest version soon?

guillenotfound commented 11 months ago

Are there any plans to update the dependencies?

wichopy commented 5 months ago

about to drop this library due to lack of updates for the last year and this security issue