broadcast-sample-app
broadcast-sample-app copied to clipboard
chore(deps): update dependency express to v4.20.0 (main)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| express (source) | dependencies | minor | 4.18.2 -> 4.20.0 |
By merging this PR, the issue #69 will be automatically resolved and closed:
| Severity | CVE | Reachability | |
|---|---|---|---|
Medium |
6.1 | CVE-2024-29041 | |
Medium |
5.0 | CVE-2024-43796 |
Release Notes
expressjs/express (express)
v4.20.0
==========
- deps: [email protected]
- Remove link renderization in html while redirecting
- deps: [email protected]
- Remove link renderization in html while redirecting
- deps: [email protected]
- add
depthoption to customize the depth level in the parser - IMPORTANT: The default
depthlevel for parsing URL-encoded data is now32(previously wasInfinity)
- add
- Remove link renderization in html while using
res.redirect - deps: [email protected]
- Adds support for named matching groups in the routes using a regex
- Adds backtracking protection to parameters without regexes defined
- deps: encodeurl@~2.0.0
- Removes encoding of
\,|, and^to align better with URL spec
- Removes encoding of
- Deprecate passing
options.maxAgeandoptions.expirestores.clearCookie- Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie
v4.19.2
==========
- Improved fix for open redirect allow list bypass
v4.19.1
==========
- Allow passing non-strings to res.location with new encoding handling checks
v4.19.0
==========
- Prevent open redirect allow list bypass due to encodeurl
- deps: [email protected]
v4.18.3
==========
- Fix routing requests without method
- deps: [email protected]
- Fix strict json error message on Node.js 19+
- deps: content-type@~1.0.5
- deps: [email protected]
- deps: [email protected]
- Add
partitionedoption
- Add
- [ ] If you want to rebase/retry this PR, check this box
Medium