flagon-io/container-check

public

Checks that a server app deploys as a container on g1t.page

Upgrade body-parser to 2.4.0 #489

Mergedsyntaqx merged g1t/security/body-parser-2.4.0 into maindependenciesjavascript

Merged into main by syntaqx via a merge commit in 5877200 3d ago

g1tbotopened this pull request3d ago

Upgrades body-parser (npm) from 2.3.0 to 2.4.0, which fixes these known vulnerabilities:

Advisory	Severity	Affected	Fixed in	Summary
GHSA-27r3-jxmh-p828	high	2.3.0	2.4.0	body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

Lockfiles changed: package-lock.json.

Only the version changes. This pull request lands through this branch's required checks like any other. If they fail because code has to change, g1t closes it and puts g1t on a work item to make the change.

Opened by g1t's security updates. Turn them off for this project on its Security page.

g1tbotadded the dependencies and javascript labels· 3d ago

g1tbotcommented3d ago

Passed. 4 dependency changes, none vulnerable.

package-lock.json

Change	Package	Version	Relationship	License	Vulnerabilities
Added	`body-parser`	2.4.0	transitive	MIT	none known
Added	`qs`	6.16.1	transitive	BSD-3-Clause	none known
Removed	`body-parser`	2.3.0	transitive	MIT
Removed	`qs`	6.16.0	transitive	BSD-3-Clause

This check fails on vulnerabilities of high severity or higher. Change it in the repository's Security settings.

syntaqxmerged this· 3d ago

All checks have passed

2 passed · on 7f9f7cd

Workflows

Dependency review — 4 dependency changes, none vulnerableDetails

g1t / deploy — Preview is live

All checks have passed

2 passed · on 7f9f7cd

Workflows

Dependency review — 4 dependency changes, none vulnerableDetails

g1t / deploy — Preview is live

Merged and closed: the branch can be deleted safely

Everything on it is in its base now.