Security problem

[victorymakes]

There are some security problems.

Below is the dependency

`-- [email protected]
  `-- [email protected]
    `-- [email protected]
      +-- [email protected]
      | `-- [email protected]
      `-- [email protected]

Below is the problem.

CVE-2017-16026 moderate severity Vulnerable versions: >= 2.49.0, < 2.68.0 Patched version: 2.68.0 Affected versions of request will disclose local system memory to remote systems in certain circumstances. When a multipart request is made, and the type of body is number, then a buffer of that size will be allocated and sent to the remote server as the body.

[njzjz]

Hi @tea3 , you can use https://dependabot.com/ to get some PRs automatically

[Misaka13514]

Hi @tea3 , you can use https://dependabot.com/ to get some PRs automatically

Dependabot cannot update them to a non-vulnerable version