mongodb-js / devtools-shared / 25556595327

79%

main: 79%

Pull #742

github

chore(deps): bump basic-ftp from 5.3.0 to 5.3.1

Resolves GHSA-rpmf-866q-6p89 / CVE-2026-44240. Updates the transitive
dependency basic-ftp (via get-uri → pac-proxy-agent) to 5.3.1 which
introduces a maximum control-response buffer size, preventing unbounded
memory growth when connected to a malicious FTP server.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

1876 of 2655 branches covered (70.66%)

Branch coverage included in aggregate %.

4059 of 4893 relevant lines covered (82.96%)

631.82 hits per line