Repository navigation
Commit 8d34317
deps: bump proxy-addr to 2.0.8 (GHSA-jqcg-44mw-7w3h) (#864)
A critical advisory on proxy-addr <2.0.8 (IP spoofing via an IPv4-mapped
IPv6 trust subnet) now fails the CI dependency audit on every branch.
express 5.2.1 accepts ~2.0.7, so this is a lockfile-only patch bump.
Co-authored-by: JF <john.franklin@gmail.com>
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>1 parent d64bd02 commit 8d34317
1 file changed
Lines changed: 4 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments