Skip to content

Commit b4093bb

Browse files
committed
Update form-data to use version 4.0.4
Fixes a critical security vulnerability related to form-data using an unsafe random function for choosing a boundary.
1 parent b8b4140 commit b4093bb

File tree

2 files changed

+7
-17
lines changed

2 files changed

+7
-17
lines changed

package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -198,6 +198,7 @@
198198
"nwsapi": "^2.2.1",
199199
"path-to-regexp": "~8.0.0",
200200
"patternfly": "~3.59.5",
201-
"terser": "~4.8.1"
201+
"terser": "~4.8.1",
202+
"form-data": "~4.0.4"
202203
}
203204
}

yarn.lock

Lines changed: 5 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -5123,7 +5123,7 @@ __metadata:
51235123
languageName: node
51245124
linkType: hard
51255125

5126-
"combined-stream@npm:^1.0.6, combined-stream@npm:^1.0.8, combined-stream@npm:~1.0.6":
5126+
"combined-stream@npm:^1.0.8, combined-stream@npm:~1.0.6":
51275127
version: 1.0.8
51285128
resolution: "combined-stream@npm:1.0.8"
51295129
dependencies:
@@ -8301,27 +8301,16 @@ __metadata:
83018301
languageName: node
83028302
linkType: hard
83038303

8304-
"form-data@npm:~2.3.2":
8305-
version: 2.3.3
8306-
resolution: "form-data@npm:2.3.3"
8307-
dependencies:
8308-
asynckit: "npm:^0.4.0"
8309-
combined-stream: "npm:^1.0.6"
8310-
mime-types: "npm:^2.1.12"
8311-
checksum: 10/1b6f3ccbf4540e535887b42218a2431a3f6cfdea320119c2affa2a7a374ad8fdd1e60166fc865181f45d49b1684c3e90e7b2190d3fe016692957afb9cf0d0d02
8312-
languageName: node
8313-
linkType: hard
8314-
8315-
"form-data@npm:~4.0.0":
8316-
version: 4.0.3
8317-
resolution: "form-data@npm:4.0.3"
8304+
"form-data@npm:~4.0.4":
8305+
version: 4.0.4
8306+
resolution: "form-data@npm:4.0.4"
83188307
dependencies:
83198308
asynckit: "npm:^0.4.0"
83208309
combined-stream: "npm:^1.0.8"
83218310
es-set-tostringtag: "npm:^2.1.0"
83228311
hasown: "npm:^2.0.2"
83238312
mime-types: "npm:^2.1.12"
8324-
checksum: 10/22f6e55e6f32a5797a500ed7ca5aa9d690c4de6e1b3308f25f0d83a27d08d91a265ab59a190db2305b15144f8f07df08e8117bad6a93fc93de1baa838bfcc0b5
8313+
checksum: 10/a4b62e21932f48702bc468cc26fb276d186e6b07b557e3dd7cc455872bdbb82db7db066844a64ad3cf40eaf3a753c830538183570462d3649fdfd705601cbcfb
83258314
languageName: node
83268315
linkType: hard
83278316

0 commit comments

Comments
 (0)