fix: CVE-2025-7783

david-hamilton-glean · david-hamilton-glean · commit 7c7b092cd8bb · 2025-07-22T12:53:42.000-07:00
Resolved by bumping form-data.  Note this is only a dev dependency.  No
impact to users.
diff --git a/packages/configure-mcp-server/package.json b/packages/configure-mcp-server/package.json
@@ -67,6 +67,7 @@
     "console-test-helpers": "^0.3.3",
     "eslint": "^9.30.1",
     "fixturify": "^3.0.0",
+    "form-data": "^4.0.4",
     "fs-extra": "^11.3.0",
     "globals": "^16.3.0",
     "msw": "^2.10.2",
diff --git a/packages/local-mcp-server/package.json b/packages/local-mcp-server/package.json
@@ -71,6 +71,7 @@
     "console-test-helpers": "^0.3.3",
     "eslint": "^9.30.1",
     "fixturify": "^3.0.0",
+    "form-data": "^4.0.4",
     "fs-extra": "^11.3.0",
     "globals": "^16.3.0",
     "msw": "^2.10.2",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
