refactor(core): Upgrade multer to address CVE-2025-48997 (#16055)

This commit is contained in:
Iván Ovejero
2025-06-05 16:58:53 +02:00
committed by GitHub
parent 47538e17ef
commit be8c2a73d3
2 changed files with 7 additions and 16 deletions

View File

@@ -83,6 +83,7 @@
"@types/node": "^20.17.50", "@types/node": "^20.17.50",
"chokidar": "^4.0.1", "chokidar": "^4.0.1",
"esbuild": "^0.24.0", "esbuild": "^0.24.0",
"multer": "^2.0.1",
"pug": "^3.0.3", "pug": "^3.0.3",
"semver": "^7.5.4", "semver": "^7.5.4",
"tar-fs": "2.1.3", "tar-fs": "2.1.3",

22
pnpm-lock.yaml generated
View File

@@ -172,6 +172,7 @@ overrides:
'@types/node': ^20.17.50 '@types/node': ^20.17.50
chokidar: ^4.0.1 chokidar: ^4.0.1
esbuild: ^0.24.0 esbuild: ^0.24.0
multer: ^2.0.1
pug: ^3.0.3 pug: ^3.0.3
semver: ^7.5.4 semver: ^7.5.4
tar-fs: 2.1.3 tar-fs: 2.1.3
@@ -8123,10 +8124,6 @@ packages:
concat-map@0.0.1: concat-map@0.0.1:
resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==} resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==}
concat-stream@1.6.2:
resolution: {integrity: sha512-27HBghJxjiZtIk3Ycvn/4kbJk/1uZuJFfuPEns6LaEvpvG1f0hTea8lilrouyo9mVc2GWdcEZ8OLoGmSADlrCw==}
engines: {'0': node >= 0.8}
concat-stream@2.0.0: concat-stream@2.0.0:
resolution: {integrity: sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==} resolution: {integrity: sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==}
engines: {'0': node >= 6.0} engines: {'0': node >= 6.0}
@@ -11359,8 +11356,8 @@ packages:
muggle-string@0.4.1: muggle-string@0.4.1:
resolution: {integrity: sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ==} resolution: {integrity: sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ==}
multer@2.0.0: multer@2.0.1:
resolution: {integrity: sha512-bS8rPZurbAuHGAnApbM9d4h1wSoYqrOqkE+6a64KLMK9yWU7gJXBDDVklKQ3TPi9DRb85cRs6yXaC0+cjxRtRg==} resolution: {integrity: sha512-Ug8bXeTIUlxurg8xLTEskKShvcKDZALo1THEX5E41pYCD2sCVub5/kIRIGqWNoqV6szyLyQKV6mD4QUrWE5GCQ==}
engines: {node: '>= 10.16.0'} engines: {node: '>= 10.16.0'}
mustache@4.2.0: mustache@4.2.0:
@@ -21547,13 +21544,6 @@ snapshots:
concat-map@0.0.1: {} concat-map@0.0.1: {}
concat-stream@1.6.2:
dependencies:
buffer-from: 1.1.2
inherits: 2.0.4
readable-stream: 2.3.7
typedarray: 0.0.6
concat-stream@2.0.0: concat-stream@2.0.0:
dependencies: dependencies:
buffer-from: 1.1.2 buffer-from: 1.1.2
@@ -22841,7 +22831,7 @@ snapshots:
lodash.clonedeep: 4.5.0 lodash.clonedeep: 4.5.0
lodash.get: 4.4.2 lodash.get: 4.4.2
media-typer: 1.1.0 media-typer: 1.1.0
multer: 2.0.0 multer: 2.0.1
ono: 7.1.3 ono: 7.1.3
path-to-regexp: 8.2.0 path-to-regexp: 8.2.0
qs: 6.14.0 qs: 6.14.0
@@ -25692,11 +25682,11 @@ snapshots:
muggle-string@0.4.1: {} muggle-string@0.4.1: {}
multer@2.0.0: multer@2.0.1:
dependencies: dependencies:
append-field: 1.0.0 append-field: 1.0.0
busboy: 1.6.0 busboy: 1.6.0
concat-stream: 1.6.2 concat-stream: 2.0.0
mkdirp: 0.5.6 mkdirp: 0.5.6
object-assign: 4.1.1 object-assign: 4.1.1
type-is: 1.6.18 type-is: 1.6.18