Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dicer #134

Closed
thomaes8 opened this issue Nov 15, 2022 · 1 comment
Closed

Dicer #134

thomaes8 opened this issue Nov 15, 2022 · 1 comment
Labels

Comments

@thomaes8
Copy link

thomaes8 commented Nov 15, 2022

npm audit report

dicer *
Severity: high
Crash in HeaderParser in dicer - GHSA-wm7h-9275-46v2
fix available via npm audit fix --force
Will install [email protected], which is a breaking change
node_modules/dicer
busboy <=0.3.1
Depends on vulnerable versions of dicer
node_modules/busboy
await-busboy *
Depends on vulnerable versions of busboy
node_modules/await-busboy
koa-joi-router >=5.0.0
Depends on vulnerable versions of await-busboy
node_modules/koa-joi-router

4 high severity vulnerabilities

Node.js version: 18.7.

OS version: Windows 10

@thomaes8 thomaes8 added the bug label Nov 15, 2022
@thomaes8 thomaes8 changed the title Dicer[fix] DESCRIPTIVE TITLE Dicer Nov 15, 2022
@3imed-jaberi
Copy link
Member

@thomaes8 thank you for your report, This is not an issue because we replace the await-busboy module with a modern one @fastify/busboy!

If you need this catch ASAP, I recommend you to use @koa-better-modules/joi-router until I can publish the official release under @koa/joi-router.

For more details, you can check 👀!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants