Announce: v2.1 published on `latest` fixing CVE-2022-24999

node-formidable / formidable

The most used, flexible, fast and streaming parser for multipart form data. Supports uploading to serverless environments, AWS S3, Azure, GCP or the filesystem. Used in production.

MIT License

7k stars 680 forks source link

Announce: v2.1 published on `latest` fixing CVE-2022-24999 #908

Closed tunnckoCore closed 1 year ago

tunnckoCore commented 1 year ago

v2.1 is published with updated dependencies, fixing the CVE-2022-24999 of qs@6.9.3.

Now dependencies are with ^, and not pinned which was the problem, thus won't have such future issues.

From mail reports.