Skip to content

CMR-10695: Fix security vulnerabilities - #405

Merged
doug-newman-nasa merged 1 commit into
nasa:masterfrom
KaseyW31:CMR-10695
Jul 29, 2025
Merged

CMR-10695: Fix security vulnerabilities#405
doug-newman-nasa merged 1 commit into
nasa:masterfrom
KaseyW31:CMR-10695

Conversation

@KaseyW31

Copy link
Copy Markdown
Contributor

Overview

What is the feature?

A critical security vulnerability has been detected in the form-data package (GHSA-fjxv-7rqg-78g4). npm also detects multiple security vulnerabilities in existing packages.

What is the Solution?

Ran npm audit fix which upgraded form-data and other packages to the patched versions

What areas of the application does this impact?

Testing

Reproduction steps

  • Environment for testing:
  • Collection to test with:
  1. Inspect the package-lock.json file and verify that the form-data package resolves to versions 3.0.4 or 4.0.4, which are the patched versions.
  2. Run npm audit and verify that there are 0 vulnerabilities.

Attachments

Please include relevant screenshots or files that would be helpful in reviewing and verifying this change.

Checklist

  • I have added automated tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings

Co-authored-by: EthanGrants <105686621+EthanGrants@users.noreply.github.com>
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.52%. Comparing base (00ef9e7) to head (4047f69).

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #405   +/-   ##
=======================================
  Coverage   89.52%   89.52%           
=======================================
  Files          24       24           
  Lines        1270     1270           
  Branches      276      276           
=======================================
  Hits         1137     1137           
  Misses        133      133           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@eereiter
eereiter self-requested a review July 29, 2025 17:23
@doug-newman-nasa
doug-newman-nasa merged commit 27fd664 into nasa:master Jul 29, 2025
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants