patches v1.5.7 #47

Merged

jkeffects merged 2 commits from develop into main

2026-06-24 14:21:38 +00:00

jkeffects commented

2026-06-24 14:20:58 +00:00

Owner

update packages and cve close

jkeffects self-assigned this

2026-06-24 14:20:58 +00:00

jkeffects added 1 commit

2026-06-24 14:20:58 +00:00

update packages and cve close 36697d6d3b

multer  1.0.0 - 2.1.1
Severity: high
Multer vulnerable to Denial of Service via deeply nested field names - https://github.com/advisories/GHSA-72gw-mp4g-v24j
Multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads - https://github.com/advisories/GHSA-3p4h-7m6x-2hcm

nodemailer  <=9.0.0
Severity: high
Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message - https://github.com/advisories/GHSA-p6gq-j5cr-w38f

ws  8.0.0 - 8.20.1
Severity: high
ws: Memory exhaustion DoS from tiny fragments and data chunks - https://github.com/advisories/GHSA-96hv-2xvq-fx4p

jkeffects added 1 commit

2026-06-24 14:21:11 +00:00

Merge branch 'main' into develop 60f3ff4f42

jkeffects merged commit d41ae08ba4 into main

2026-06-24 14:21:38 +00:00

jkeffects referenced this pull request from a commit

2026-06-24 14:21:39 +00:00

Merge pull request 'patches v1.5.7' (#47) from develop into main