Skip to content

fix(deps): busboy and dicer security vulnerability in dependencies#178

Open
sunnz wants to merge 1 commit into
thiagobustamante:masterfrom
sunnz:master
Open

fix(deps): busboy and dicer security vulnerability in dependencies#178
sunnz wants to merge 1 commit into
thiagobustamante:masterfrom
sunnz:master

Conversation

@sunnz

@sunnz sunnz commented Nov 25, 2022

Copy link
Copy Markdown

bump multer version from 1.4.2 to 1.4.5-lts.1 to remove dicer
vulnerability: GHSA-wm7h-9275-46v2

to fully remove busboy and dicer you still need to update typescript-rest-ioc dependencies with a new version of typescript-rest, but it needs to be removed in typescript-rest first.

dependencies before this patch:

typescript-rest@3.0.4 ~/typescript-rest
└─┬ multer@1.4.2
  └─┬ busboy@0.2.14
    └── dicer@0.2.5

dependencies after this patch:

typescript-rest@3.0.4 ~/typescript-rest
└─┬ typescript-rest-ioc@1.0.0
  └─┬ typescript-rest@3.0.2
    └─┬ multer@1.4.4
      └─┬ busboy@0.2.14
        └── dicer@0.2.5

bump multer version from 1.4.2 to 1.4.5-lts.1 to remove dicer
vulnerability: GHSA-wm7h-9275-46v2
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant