mongodb-js / devtools-shared / 25556595327 / 23 – devtools-connect

79%

main: 79%

Pull #742

github

chore(deps): bump basic-ftp from 5.3.0 to 5.3.1

Resolves GHSA-rpmf-866q-6p89 / CVE-2026-44240. Updates the transitive
dependency basic-ftp (via get-uri → pac-proxy-agent) to 5.3.1 which
introduces a maximum control-response buffer size, preventing unbounded
memory growth when connected to a malicious FTP server.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

133 of 277 branches covered (48.01%)

Branch coverage included in aggregate %.

349 of 507 relevant lines covered (68.84%)

6.61 hits per line