From 3940327dbbc8314abd77785bdb134578af40b78b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 21 May 2025 08:34:44 +0000 Subject: [PATCH] fix: backend/package.json & backend/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MULTER-10185673 - https://snyk.io/vuln/SNYK-JS-MULTER-10185675 --- backend/package-lock.json | 17 +++++++++-------- backend/package.json | 2 +- 2 files changed, 10 insertions(+), 9 deletions(-) diff --git a/backend/package-lock.json b/backend/package-lock.json index 0d58dd6046..7231ce3b70 100644 --- a/backend/package-lock.json +++ b/backend/package-lock.json @@ -39,7 +39,7 @@ "mkdirp": "^1.0.3", "moment": "^2.29.4", "morgan": "^1.9.1", - "multer": "^1.4.5-lts.1", + "multer": "^2.0.0", "passport": "^0.6.0", "passport-cookie": "^1.0.9", "passport-unique-token": "^3.0.0", @@ -7120,9 +7120,10 @@ "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==" }, "node_modules/multer": { - "version": "1.4.5-lts.1", - "resolved": "https://registry.npmjs.org/multer/-/multer-1.4.5-lts.1.tgz", - "integrity": "sha512-ywPWvcDMeH+z9gQq5qYHCCy+ethsk4goepZ45GLD63fOu0YcNecQxi64nDs3qluZB+murG3/D4dJ7+dGctcCQQ==", + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/multer/-/multer-2.0.0.tgz", + "integrity": "sha512-bS8rPZurbAuHGAnApbM9d4h1wSoYqrOqkE+6a64KLMK9yWU7gJXBDDVklKQ3TPi9DRb85cRs6yXaC0+cjxRtRg==", + "license": "MIT", "dependencies": { "append-field": "^1.0.0", "busboy": "^1.0.0", @@ -7133,7 +7134,7 @@ "xtend": "^4.0.0" }, "engines": { - "node": ">= 6.0.0" + "node": ">= 10.16.0" } }, "node_modules/multer/node_modules/mkdirp": { @@ -15437,9 +15438,9 @@ "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==" }, "multer": { - "version": "1.4.5-lts.1", - "resolved": "https://registry.npmjs.org/multer/-/multer-1.4.5-lts.1.tgz", - "integrity": "sha512-ywPWvcDMeH+z9gQq5qYHCCy+ethsk4goepZ45GLD63fOu0YcNecQxi64nDs3qluZB+murG3/D4dJ7+dGctcCQQ==", + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/multer/-/multer-2.0.0.tgz", + "integrity": "sha512-bS8rPZurbAuHGAnApbM9d4h1wSoYqrOqkE+6a64KLMK9yWU7gJXBDDVklKQ3TPi9DRb85cRs6yXaC0+cjxRtRg==", "requires": { "append-field": "^1.0.0", "busboy": "^1.0.0", diff --git a/backend/package.json b/backend/package.json index 1148a33298..c866b3f333 100644 --- a/backend/package.json +++ b/backend/package.json @@ -58,7 +58,7 @@ "mkdirp": "^1.0.3", "moment": "^2.29.4", "morgan": "^1.9.1", - "multer": "^1.4.5-lts.1", + "multer": "^2.0.0", "passport": "^0.6.0", "passport-cookie": "^1.0.9", "passport-unique-token": "^3.0.0",