Skip to content

v9.0.0

Compare
Choose a tag to compare
@redonkulus redonkulus released this 23 May 20:48
· 4 commits to master since this release
  • chore: upgrade to latest connect-busboy (#34) f5936f8
[email protected] > [email protected] > [email protected] > [email protected] -- [CVE-2022-24434](https://nvd.nist.gov/vuln/detail/CVE-2022-24434) This affects all versions of package dicer.
A malicious attacker can send a modified form to server, and crash the nodejs service. An attacker could sent the payload again and again so that the service continuously crashes.

v8.0.2...v9.0.0