patches: v1.6.3 #55

Merged
jkeffects merged 5 commits from develop into main 2026-08-08 11:18:42 +00:00
Owner

update packages and cve close
enhance: clearify noUpdateOnSecretMissmatch var in backup
enhance: provide float number type for ORM

update packages and cve close enhance: clearify noUpdateOnSecretMissmatch var in backup enhance: provide float number type for ORM
body-parser  2.0.0 - 2.2.2
body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement - https://github.com/advisories/GHSA-v422-hmwv-36x6

socket.io-parser  4.0.0 - 4.2.6
Severity: high
Socket.IO: Zero-attachment Memory Exhaustion - https://github.com/advisories/GHSA-2m8v-j782-fhvr
Sign in to join this conversation.
No reviewers
No labels
bug
feature
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
FF-Admin/ff-admin-core-server!55
No description provided.