mongodb-js / devtools-shared / 25556595327 / 12 – native-machine-id

79%

main: 79%

Pull #742

github

chore(deps): bump basic-ftp from 5.3.0 to 5.3.1

Resolves GHSA-rpmf-866q-6p89 / CVE-2026-44240. Updates the transitive
dependency basic-ftp (via get-uri → pac-proxy-agent) to 5.3.1 which
introduces a maximum control-response buffer size, preventing unbounded
memory growth when connected to a malicious FTP server.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

16 of 16 branches covered (100.0%)

Branch coverage included in aggregate %.

23 of 26 relevant lines covered (88.46%)

6.62 hits per line