[Snyk] Security upgrade express from 4.13.4 to 4.22.0#778
Conversation
…ties The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-QS-14724253
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
There was a problem hiding this comment.
Pull request overview
This PR upgrades the Express.js dependency from version 4.13.3 to 4.22.0 to fix a high-severity security vulnerability (SNYK-JS-QS-14724253) related to allocation of resources without limits or throttling in the qs package.
Key Changes:
- Updates Express version from ~4.13.3 to ~4.22.0 in the multiplex plugin's package.json
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| }, | ||
| "dependencies": { | ||
| "express": "~4.13.3", | ||
| "express": "~4.22.0", |
There was a problem hiding this comment.
The PR description states this upgrade is from express 4.13.4 to 4.22.0, but the actual code change shows the upgrade is from 4.13.3 to 4.22.0. While this doesn't affect the security fix, the PR description should accurately reflect the actual version being upgraded from.
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
presentation/plugin/multiplex/package.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-QS-14724253
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Allocation of Resources Without Limits or Throttling