From 51569bf2897cbfe7ae1938332ab4527af8ef5b5e Mon Sep 17 00:00:00 2001 From: Andriy Lysyuk Date: Fri, 26 Jun 2026 15:44:46 +0200 Subject: [PATCH] fix(security): bump form-data to >=4.0.6 in n8n (GHSA-hmw2-7cc7-3qxx) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - form-data 4.0.4 → 4.0.6 (transitive via n8n-workflow) Co-Authored-By: Claude Sonnet 4.6 --- n8n/package-lock.json | 16 ++++++++-------- n8n/package.json | 3 ++- 2 files changed, 10 insertions(+), 9 deletions(-) diff --git a/n8n/package-lock.json b/n8n/package-lock.json index e469757..e2ecb02 100644 --- a/n8n/package-lock.json +++ b/n8n/package-lock.json @@ -447,17 +447,17 @@ } }, "node_modules/form-data": { - "version": "4.0.4", - "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.4.tgz", - "integrity": "sha512-KrGhL9Q4zjj0kiUt5OO4Mr/A/jlI2jDYs5eHBpYHPcBEVSiipAvn2Ko2HnPe20rmcuuvMHNdZFp+4IlGTMF0Ow==", + "version": "4.0.6", + "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz", + "integrity": "sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==", "dev": true, "license": "MIT", "dependencies": { "asynckit": "^0.4.0", "combined-stream": "^1.0.8", "es-set-tostringtag": "^2.1.0", - "hasown": "^2.0.2", - "mime-types": "^2.1.12" + "hasown": "^2.0.4", + "mime-types": "^2.1.35" }, "engines": { "node": ">= 6" @@ -588,9 +588,9 @@ } }, "node_modules/hasown": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz", - "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==", + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz", + "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==", "dev": true, "license": "MIT", "dependencies": { diff --git a/n8n/package.json b/n8n/package.json index af8c59a..4548d49 100644 --- a/n8n/package.json +++ b/n8n/package.json @@ -49,6 +49,7 @@ "n8n-workflow": "*" }, "overrides": { - "lodash": "4.18.1" + "lodash": "4.18.1", + "form-data": "^4.0.6" } }