Keysat
3a601e166a
multer 1.x is affected by CVE-2025-47944/47935/48997/7338 (malformed
multipart crashes the process / leaks memory). 2.x raises catchable
errors instead. Usage (diskStorage + .single("file")) is unchanged.
Commit the server lockfile so the Dockerfile's npm-ci path pins the fix.
19 lines
415 B
JSON
19 lines
415 B
JSON
{
|
|
"name": "recap-relay-server",
|
|
"version": "0.2.11",
|
|
"type": "module",
|
|
"private": true,
|
|
"scripts": {
|
|
"test": "node --test test/*.test.js"
|
|
},
|
|
"dependencies": {
|
|
"@google/genai": "^1.0.0",
|
|
"@keysat/licensing-client": "file:../vendor/keysat-licensing-client",
|
|
"cors": "^2.8.5",
|
|
"cookie-parser": "^1.4.6",
|
|
"express": "^4.21.0",
|
|
"multer": "^2.0.1",
|
|
"undici": "^6.21.0"
|
|
}
|
|
}
|