[Snyk(Unlimited)] Upgrade express-fileupload from 0.0.5 to 0.4.0

[snyk-bot]

Snyk has created this PR to upgrade express-fileupload from 0.0.5 to 0.4.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 10 versions ahead of your current version.
• The recommended version was released 2 years ago, on 2018-01-24.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Arbitrary Code Injection SNYK-JS-MORGAN-72579	Proof of Concept

Release notes

Package name: express-fileupload

• 0.4.0 - 2018-01-24
  

  Release 0.4.0

• 0.3.0 - 2017-10-07
  

  Fix for #50

  NOTE: all versions moving forward will enforce support for Node 6+

• 0.2.0 - 2017-08-28
  

  Breaking Changes

  • Support for Node.js v6 and above. No longer supporting versions of Node older than 6
  • .mv() now returns a Promise when callback argument is not provided

  New Features

  • Promise returned in .mv() (#42) (9bf6e61)
• 0.1.4 - 2017-06-30
  

  Bugfixes

  • #36 Add error handlers for parser errors (0713f6f) @dries
• 0.1.3 - 2017-04-30
  

  Bugfixes

  • #21 safeFileName: Extensions are unexpectedly stripped out

  New Features

  • preserveExtension (PR #27) (8f599b4) @pronein
  • fix readme (PR #26) (63c759a) @Cactucs
• 0.1.2 - 2017-03-09
  

  Bugfixes

  • #16 Upload Large file

  New Features

  • Improve performance for large files (PR #22) (e23f337) @targos
• 0.1.1 - 2017-02-18
  

  Breaking Changes

  Breaking Change 1.) No more urlencoded support

  As of v0.1.0, there is NO MORE application/x-www-form-urlencoded SUPPORT! Moving forward, express-fileupload is considered a "multipart" solution only. If you want to parse urlencoded requests, use body-parser.

  Breaking Change 2.) Support for Node v4.x.x and above now

  Usage with Node <4 is no longer supported. Use at your own risk.

  Bugfixes

  • #6 Crashes when multipart request is empty (3d72084)
  • #9 & #11 body-parser interferes with express-fileupload and vice versa (92d7ad5)
  • #19 TypeError: callback is not a function (df3df26)

  New Features

  • Unit testing and test coverage. Addresses #5 (266c10d)
  • Field array parsing (PR #20)
• 0.1.0 - 2017-02-18
  

  markdown update

• 0.0.7 - 2017-02-10
  

  Bugfixes

  • #17 multiple input file input doesn't work (ec6270d)
• 0.0.6 - 2017-01-14
• 0.0.5 - 2016-04-22

from <a href="https://github.com/richardgirges/express-fileupload/releases">express-fileupload GitHub release notes</a>

Commit messages

Package name: express-fileupload

• ae32f43 Update to README about options and limitations
• 10e90ff fix problem in firefox with empty file upload
• ec8087e Merge pull request [Snyk] Fix for 1 vulnerable dependencies #15 from r3wt/master
• e16ac55 more conventional indentations
• 35c34e0 reformatting markdown in readme
• 06da130 Adding safeFileName option. This closes [Snyk] Fix for 1 vulnerable dependencies #13
• a1090b8 Clearer and more organized documentation. This closes [Snyk-local] Fix for 1 vulnerable dependencies #12
• eb7f3ab Documentation on how to upload multiple files at the same time. Closes [Snyk-local] Fix for 1 vulnerable dependencies #10
• 9f43c15 Minor markdown updates
• 1007aaa checking in uploadedfiles dir to repository
• 994e1cb version bump
• ec6270d Fix input fields with multiple enabled:
• d9425c0 Merge pull request [Snyk-local] Fix for 1 vulnerable dependencies #18 from flplv/fix-multiple
• d68e4a1 version bump
• cc07b11 Support arrays of fields (similar to busboy options.autoFields)
• 568f211 Merge pull request [Snyk] Fix for 14 vulnerable dependencies #20 from tomhigginsuom/master
• df3df26 Fixes [Snyk] Fix for 1 vulnerable dependencies #19. Callback in `mv` method is optional
• 3d72084 Added yarn. Added latest version of busboy; fixes [Snyk] Fix for 5 vulnerable dependencies #6.
• 92d7ad5 v0.1.0 Beta: No more urlencoded support. Multipart only. Removed connect-busboy dependency in exchange for directly using Busboy. Updated README with breaking changes. This commit also fixes [Snyk-local] Fix for 1 vulnerable dependencies #11
• 266c10d Massive overhauls. Adding Travis C.I. build. FINALLY have testing!!! Added linting rules to keep the project clean.
• ec57037 added travis build status, fixing syntax issues for node 4 and node 5 environments
• de69689 adding test coverage and badges to readme
• d35dc28 fixing bad configuration
• 6b434b4 markdown update
• 8128608 markdown update
• b7cb359 markdown updates
• 6800e84 markdown update
• 9e3361a 0.1.1
• 9785534 adding more tests
• ac309ee just one more test
• e23f337 improve performance for large files
• 90267a3 Merge pull request [Snyk] Fix for 2 vulnerable dependencies #22 from targos/improve-perf
• 01c16e8 0.1.2
• 9c88544 added eslintignore
• 6f6b47b Fix readme
• 63c759a Merge pull request [Snyk] Fix for 1 vulnerable dependencies #26 from Cactucs/patch-1
• 26e009b Add "preserverExtension" option handler
• 5bbf645 Add tests for fileupload options
• 85cfd3d Finish tests for preserveExtension file upload option
• bace2a1 Fix linting issues
• 8f599b4 Merge pull request [Snyk] Fix for 1 vulnerable dependencies #27 from pronein/feature/allowExtensionPreservationWithSafeFileNames
• b9ee66e fixing indentation in .eslintrc and adding missing rules around spacing and indentation
• 0713f6f Add error handlers for parser errors
• 27b6136 Merge pull request [Snyk] Fix for 1 vulnerable dependencies #36 from dries/master
• 2340e63 updated yarn.lock
• 17326ef 0.1.4
• 07989d2 Updating devDependencies. Updated to latest version of Google eslint rules. Updated test/server.js to be lint-happy.'
• 9bf6e61 Updated lib/index.js to be lint-happy. Added promise-based API for `.mv` method. This fixes [Snyk] Fix for 1 vulnerable dependencies #42
• 1d13af9 fixed remaining lint errors
• e5e7225 adding tests for .mv() using Promise
• 977886a 0.1.5
• ade3dae Support for Node 6+
• fcbffc3 0.2.0
• 608b8e1 update README with breaking changes for 0.2.0
• cbb77e0 Fixes [Snyk] Fix for 1 vulnerable dependencies #50. Default function argument value is not supported in Node 4 and 5. Although this package no longer supports Node 4 or 5, this seems like a harmless update.
• c3c41ec 0.3.0
• ded00eb Added md5 checksum for each file upload
• 10263ab Handle 'limit' event when file is over fileSize
• 91d944f Add file limit upload test
• 1c52f44 Add clearUploadsDir
• a10fa54 Adding option to select between two behaviour when file over fileSize
• dc923e2 Merge pull request [Snyk] Fix for 1 vulnerable dependencies #57 from tumulr/master
• 4eaccda Merge pull request [Snyk] Fix for 1 vulnerable dependencies #59 from Haggus/handle-file-limit
• bdfa47b Merge pull request [Snyk-local] Fix for 1 vulnerable dependencies #65 from ShakMR/handle-file-limit
• 9add031 update yarn.lock
• 53b7e45 Release 0.4.0

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs