Page MenuHomePhabricator
Differential D20489

[monorepo] Override form-data 4.0.6 for CRLF injection fix
ClosedPublic
Actions

Authored by bytesofman on Wed, Aug 19, 20:04.

Details

Reviewers
Fabien
Group Reviewers
Restricted Project
Commits
rABCbded7f652d9c: [monorepo] Override form-data 4.0.6 for CRLF injection fix
Summary

Pin form-data 4.x to 4.0.6 so axios, superagent, cypress-request, and vercel pick up the GHSA-hmw2-7cc7-3qxx patch.

Test Plan
  • pnpm install --lockfile-only
  • rg 'form-data@' pnpm-lock.yaml # 4.0.6 (and remaining 2.5.6)
  • pnpm audit --audit-level high # GHSA-hmw2 gone; high 11→10

Diff Detail

Repository
rABC Bitcoin ABC
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

bytesofman created this revision.Wed, Aug 19, 20:04
teamcity added a comment.Wed, Aug 19, 20:16

Build Bitcoin ABC Diffs / Diff Testing (ai-review) passed.
CodeRabbit Review

Diff : committed changes only
Compare : HEAD → master
Directory : work
────────────────────────────────────────

(\(\
(• .•) Needle. Haystack. Found.

────────────────────────────────────────
Review complete
No findings ✔

2 files reviewed:

  • pnpm-lock.yaml
  • pnpm-workspace.yaml

────────────────────────────────────────

Harbormaster completed remote builds in B37883: Diff 60930.Wed, Aug 19, 20:25
bytesofman published this revision for review.Thu, Aug 20, 02:56
Fabien accepted this revision.Thu, Aug 20, 07:29
This revision is now accepted and ready to land.Thu, Aug 20, 07:29
bytesofman updated this revision to Diff 60941.Thu, Aug 20, 08:35

Rebase onto latest master (includes landed linkify-it 5.0.2 override).

teamcity added a comment.Thu, Aug 20, 09:58

Build Bitcoin ABC Diffs / Diff Testing (ai-review) passed.
CodeRabbit Review

Diff : committed changes only
Compare : HEAD → master
Directory : work
────────────────────────────────────────

(\(\
(• .•) When you play the game of software, you code or you debug. There's no middle ground.

────────────────────────────────────────
Review complete
No findings ✔

2 files reviewed:

  • pnpm-lock.yaml
  • pnpm-workspace.yaml

────────────────────────────────────────

Harbormaster completed remote builds in B37891: Diff 60941.Thu, Aug 20, 10:02
Closed by commit rABCbded7f652d9c: [monorepo] Override form-data 4.0.6 for CRLF injection fix (authored by bytesofman). · Explain WhyThu, Aug 20, 10:05
This revision was automatically updated to reflect the committed changes.
bytesofman added a commit: rABCbded7f652d9c: [monorepo] Override form-data 4.0.6 for CRLF injection fix.

Revision Contents
Changeset List

PathSize
27 lines
1 line

Diff 60942

View Options

pnpm-lock.yaml

Loading...
View Options

pnpm-workspace.yaml

Loading...