[Snyk(Unlimited)] Upgrade express-fileupload from 0.0.5 to 0.4.0

[snyk-bot]

Snyk has created this PR to upgrade express-fileupload from 0.0.5 to 0.4.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 10 versions ahead of your current version.
• The recommended version was released 2 years ago, on 2018-01-24.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Arbitrary Code Injection SNYK-JS-MORGAN-72579	Proof of Concept

Release notes

Package name: express-fileupload

• 0.4.0 - 2018-01-24
  

  Release 0.4.0

• 0.3.0 - 2017-10-07
  

  Fix for #50

  NOTE: all versions moving forward will enforce support for Node 6+

• 0.2.0 - 2017-08-28
  

  Breaking Changes

  • Support for Node.js v6 and above. No longer supporting versions of Node older than 6
  • .mv() now returns a Promise when callback argument is not provided

  New Features

  • Promise returned in .mv() (#42) (9bf6e61)
• 0.1.4 - 2017-06-30
  

  Bugfixes

  • #36 Add error handlers for parser errors (0713f6f) @dries
• 0.1.3 - 2017-04-30
  

  Bugfixes

  • #21 safeFileName: Extensions are unexpectedly stripped out

  New Features

  • preserveExtension (PR #27) (8f599b4) @pronein
  • fix readme (PR #26) (63c759a) @Cactucs
• 0.1.2 - 2017-03-09
  

  Bugfixes

  • #16 Upload Large file

  New Features

  • Improve performance for large files (PR #22) (e23f337) @targos
• 0.1.1 - 2017-02-18
  

  Breaking Changes

  Breaking Change 1.) No more urlencoded support

  As of v0.1.0, there is NO MORE application/x-www-form-urlencoded SUPPORT! Moving forward, express-fileupload is considered a "multipart" solution only. If you want to parse urlencoded requests, use body-parser.

  Breaking Change 2.) Support for Node v4.x.x and above now

  Usage with Node <4 is no longer supported. Use at your own risk.

  Bugfixes

  • #6 Crashes when multipart request is empty (3d72084)
  • #9 & #11 body-parser interferes with express-fileupload and vice versa (92d7ad5)
  • #19 TypeError: callback is not a function (df3df26)

  New Features

  • Unit testing and test coverage. Addresses #5 (266c10d)
  • Field array parsing (PR #20)
• 0.1.0 - 2017-02-18
  

  markdown update

• 0.0.7 - 2017-02-10
  

  Bugfixes

  • #17 multiple input file input doesn't work (ec6270d)
• 0.0.6 - 2017-01-14
• 0.0.5 - 2016-04-22

from express-fileupload GitHub release notes

Commit messages

Package name: express-fileupload

• 53b7e45 Release 0.4.0
• 9add031 update yarn.lock
• bdfa47b Merge pull request [Snyk-local] Fix for 1 vulnerable dependencies #65 from ShakMR/handle-file-limit
• 4eaccda Merge pull request [Snyk] Fix for 1 vulnerable dependencies #59 from Haggus/handle-file-limit
• dc923e2 Merge pull request [Snyk] Fix for 1 vulnerable dependencies #57 from tumulr/master
• a10fa54 Adding option to select between two behaviour when file over fileSize
• 1c52f44 Add clearUploadsDir
• 91d944f Add file limit upload test
• 10263ab Handle 'limit' event when file is over fileSize
• ded00eb Added md5 checksum for each file upload
• c3c41ec 0.3.0
• cbb77e0 Fixes [Snyk] Fix for 1 vulnerable dependencies #50. Default function argument value is not supported in Node 4 and 5. Although this package no longer supports Node 4 or 5, this seems like a harmless update.
• 608b8e1 update README with breaking changes for 0.2.0
• fcbffc3 0.2.0
• ade3dae Support for Node 6+
• 977886a 0.1.5
• e5e7225 adding tests for .mv() using Promise
• 1d13af9 fixed remaining lint errors
• 9bf6e61 Updated lib/index.js to be lint-happy. Added promise-based API for `.mv` method. This fixes [Snyk] Fix for 1 vulnerable dependencies #42
• 07989d2 Updating devDependencies. Updated to latest version of Google eslint rules. Updated test/server.js to be lint-happy.'
• 17326ef 0.1.4
• 2340e63 updated yarn.lock
• 27b6136 Merge pull request [Snyk] Fix for 1 vulnerable dependencies #36 from dries/master
• 0713f6f Add error handlers for parser errors

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs