studio
studio copied to clipboard
Update dependency express to v4.21.0
trafficstars
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| express (source) | dependencies | minor | 4.19.2 -> 4.21.0 |
By merging this PR, the issue #381 will be automatically resolved and closed:
| Severity | CVE | Reachability | |
|---|---|---|---|
High |
7.5 | CVE-2024-45296 | |
High |
7.5 | CVE-2024-52798 | |
Medium |
5.0 | CVE-2024-43796 | |
Medium |
5.0 | CVE-2024-43799 | |
Medium |
5.0 | CVE-2024-43800 |
Release Notes
expressjs/express (express)
v4.21.0
What's Changed
- Deprecate
"back"magic string in redirects by @blakeembrey in https://github.com/expressjs/express/pull/5935 - [email protected] by @wesleytodd in https://github.com/expressjs/express/pull/5954
- fix(deps): [email protected] by @wesleytodd in https://github.com/expressjs/express/pull/5951
- Upgraded dependency qs to 6.13.0 to match qs in body-parser by @agadzinski93 in https://github.com/expressjs/express/pull/5946
New Contributors
- @agadzinski93 made their first contribution in https://github.com/expressjs/express/pull/5946
Full Changelog: https://github.com/expressjs/express/compare/4.20.0...4.21.0
v4.20.0
==========
- deps: [email protected]
- Remove link renderization in html while redirecting
- deps: [email protected]
- Remove link renderization in html while redirecting
- deps: [email protected]
- add
depthoption to customize the depth level in the parser - IMPORTANT: The default
depthlevel for parsing URL-encoded data is now32(previously wasInfinity)
- add
- Remove link renderization in html while using
res.redirect - deps: [email protected]
- Adds support for named matching groups in the routes using a regex
- Adds backtracking protection to parameters without regexes defined
- deps: encodeurl@~2.0.0
- Removes encoding of
\,|, and^to align better with URL spec
- Removes encoding of
- Deprecate passing
options.maxAgeandoptions.expirestores.clearCookie- Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie
- [ ] If you want to rebase/retry this PR, check this box
High
Medium