mongodb-js / devtools-shared / 25556595327 / 17 – signing-utils

79%

main: 79%

Pull #742

github

chore(deps): bump basic-ftp from 5.3.0 to 5.3.1

Resolves GHSA-rpmf-866q-6p89 / CVE-2026-44240. Updates the transitive
dependency basic-ftp (via get-uri → pac-proxy-agent) to 5.3.1 which
introduces a maximum control-response buffer size, preventing unbounded
memory growth when connected to a malicious FTP server.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

23 of 28 branches covered (82.14%)

Branch coverage included in aggregate %.

98 of 111 relevant lines covered (88.29%)

2.14 hits per line