Commit a40d6b2
fix: Resolve HIGH severity qs DoS vulnerability (CVE-2025-15284)
Update dependencies to patch security vulnerability:
- Updated stripe: 19.1.0 → 19.3.1
- Updated qs: 6.14.0 → 6.14.1 (transitive dependency)
Fixes Dependabot alert #14 - qs arrayLimit bypass DoS vulnerability.
The qs package had a vulnerability allowing memory exhaustion attacks
via bracket notation that bypassed arrayLimit protection.
Verified with npm audit: 0 vulnerabilities
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Sonnet 4.5 <[email protected]>1 parent 0598922 commit a40d6b2
1 file changed
+6
-6
lines changedSome generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments