Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

please update the dependency busboy's version #1072

Closed
luoxzhg opened this issue Feb 23, 2022 · 4 comments
Closed

please update the dependency busboy's version #1072

luoxzhg opened this issue Feb 23, 2022 · 4 comments
Labels

Comments

@luoxzhg
Copy link

luoxzhg commented Feb 23, 2022

originalname was decoded incorrectly, when using postman to upload a file that filename is chinese #247

@luoxzhg luoxzhg changed the title please update the dependency busbody's version please update the dependency busboy's version Feb 23, 2022
@nitedani
Copy link

multer 1.4.4 -> busboy 0.2.14 -> dicer 0.2.5 -> [DEP0005] DeprecationWarning: Buffer() is deprecated since v10.0.0 due to security and usability issues. Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from() methods instead.

@SimenB
Copy link

SimenB commented Jun 1, 2022

There's also a vulnerability in dicer: GHSA-wm7h-9275-46v2

@LinusU
Copy link
Member

LinusU commented Jun 1, 2022

This is fixed in 1.4.5-lts.1. It's released as -lts.1 since it's a breaking change, since it drops support for older Node.js versions.

@LinusU
Copy link
Member

LinusU commented Jun 1, 2022

I'm happy to accept patches that fixes this in a way that maintains backwards compatibility, then we can release it as a normal point release in the 1.x line.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

5 participants