mongodb-js / devtools-shared / 25556595327 / 8 – oidc-http-server-pages

79%

main: 79%

Pull #742

github

chore(deps): bump basic-ftp from 5.3.0 to 5.3.1

Resolves GHSA-rpmf-866q-6p89 / CVE-2026-44240. Updates the transitive
dependency basic-ftp (via get-uri → pac-proxy-agent) to 5.3.1 which
introduces a maximum control-response buffer size, preventing unbounded
memory growth when connected to a malicious FTP server.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

25 of 27 branches covered (92.59%)

Branch coverage included in aggregate %.

87 of 91 relevant lines covered (95.6%)

8.09 hits per line