fix(deps): resolve critical npm advisories in koa and basic-ftp #1

Merged

nicolas merged 1 commit from fix/npm-audit-critical into main

2026-06-13 12:28:21 +00:00

nicolas commented

2026-06-13 12:26:48 +00:00

Owner

Bump transitive dev dependencies via 'npm audit fix' (no --force,
no breaking change). Only package-lock.json is touched.

koa 2.15.3 -> 2.16.4 (ReDoS, open-redirect, XSS, host-header injection)
basic-ftp 5.0.5 -> 5.3.1 (path traversal, CRLF injection, DoS)

Both pulled in transitively by @web/test-runner*. Critical advisories
go from 2 to 0; node test suite (34 tests) still green.

Bump transitive dev dependencies via 'npm audit fix' (no --force, no breaking change). Only package-lock.json is touched. - koa 2.15.3 -> 2.16.4 (ReDoS, open-redirect, XSS, host-header injection) - basic-ftp 5.0.5 -> 5.3.1 (path traversal, CRLF injection, DoS) Both pulled in transitively by @web/test-runner*. Critical advisories go from 2 to 0; node test suite (34 tests) still green.

nicolas added 1 commit

2026-06-13 12:26:48 +00:00

fix(deps): resolve critical npm advisories in koa and basic-ftp b0241840ae

Bump transitive dev dependencies via 'npm audit fix' (no --force,
  no breaking change). Only package-lock.json is touched.

  - koa 2.15.3 -> 2.16.4 (ReDoS, open-redirect, XSS, host-header injection)
  - basic-ftp 5.0.5 -> 5.3.1 (path traversal, CRLF injection, DoS)

  Both pulled in transitively by @web/test-runner*. Critical advisories
  go from 2 to 0; node test suite (34 tests) still green.

nicolas merged commit 3baf16e1c0 into main

2026-06-13 12:28:21 +00:00

nicolas deleted branch fix/npm-audit-critical

2026-06-13 12:28:21 +00:00

nicolas referenced this pull request from a commit

2026-06-13 12:28:22 +00:00

Merge pull request 'fix(deps): resolve critical npm advisories in koa and basic-ftp' (#1) from fix/npm-audit-critical into main