Skip to content

Update dependency express to v4.21.0 - #384

Open
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
mend/express-4.x
Open

Update dependency express to v4.21.0#384
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
mend/express-4.x

Conversation

@mend-for-github-com

@mend-for-github-commend-for-github-comBot commented Sep 11, 2024

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

PackageTypeUpdateChange
express (source)dependenciesminor4.19.2 -> 4.21.0

By merging this PR, the issue #381 will be automatically resolved and closed:

Severity CVSS ScoreCVEReachability
High High7.5CVE-2024-45296
High High7.5CVE-2024-52798
Medium Medium5.0CVE-2024-43796
Medium Medium5.0CVE-2024-43799
Medium Medium5.0CVE-2024-43800

Release Notes

expressjs/express (express)

v4.21.0

Compare Source

What's Changed

New Contributors

Full Changelog: expressjs/express@4.20.0...4.21.0

v4.20.0

Compare Source

==========

  • deps: serve-static@0.16.0
    • Remove link renderization in html while redirecting
  • deps: send@0.19.0
    • Remove link renderization in html while redirecting
  • deps: body-parser@0.6.0
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: path-to-regexp@0.1.10
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

  • If you want to rebase/retry this PR, check this box

@mend-for-github-commend-for-github-comBot added the security fix Security fix generated by Mend label Sep 11, 2024
@mend-for-github-commend-for-github-comBot changed the title Update dependency express to v4.20.0Update dependency express to v4.21.2Dec 6, 2024
@mend-for-github-commend-for-github-comBot changed the title Update dependency express to v4.21.2Update dependency express to v4.21.0Feb 12, 2025
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fixSecurity fix generated by Mend

Development

Successfully merging this pull request may close these issues.

0 participants