Skip to content
This repository was archived by the owner on Jun 9, 2026. It is now read-only.

Security Patch 2024-04-02 (express.js vulnerability)

Choose a tag to compare

View all tags
@janishutz janishutz released this 02 Apr 17:12
· 77 commits to master since this release
V1.0.4
f58a597
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Express.js has a vulnerability that might affect libreevent. I have therefore updated it and you should be able to update very easily by just copying the new package.json file into the server directory and running npm i

What's Changed

  • Bump follow-redirects from 1.15.5 to 1.15.6 in /src/server by @dependabot in #13
  • Bump express from 4.18.2 to 4.19.2 in /src/server by @dependabot in #14

Full Changelog: V1.0.3...V1.0.4

Contributors

dependabot
Assets 5
Loading