Mintplex-Labs/anything-llm
1
0
Fork 0
mirror of https://github.com/Mintplex-Labs/anything-llm.git synced 2026-07-19 14:13:35 -04:00
Code Issues 328 Packages Projects Releases 10 Wiki Activity

[PR #4761] [MERGED] Bump form-data version #4756

New Issue
Closed
opened 2026-02-22 18:36:28 -05:00 by yindo · 0 comments
yindo commented 2026-02-22 18:36:28 -05:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/Mintplex-Labs/anything-llm/pull/4761
Author: @timothycarambat
Created: 12/10/2025
Status: ✅ Merged
Merged: 12/10/2025
Merged by: @timothycarambat

Base: master ← Head: chore/form-data-bump

📝 Commits (5)

  • 8e79621 Bump packages
  • 679b9df Merge branch 'master' of github.com:Mintplex-Labs/anything-llm into chore/form-data-bump
  • 5dfd612 dev tag
  • caae174 dev tag rename
  • 41c1fd0 Merge branch 'master' into chore/form-data-bump

📊 Changes

3 files changed (+30 additions, -12 deletions)

View changed files

📝 .github/workflows/dev-build.yaml (+2 -2)
📝 server/package.json (+4 -0)
📝 server/yarn.lock (+24 -10)

📄 Description

Docker Scout reports two critical-level CVEs coming from formdata

Reported from CVE-2025-7783

Field Value
Package npm / form-data
Affected Version 3.0.1
CVSS Score 9.4 (Critical)
EPSS Score 0.00062 (0.194)
Affected Version Range >=3.0.0, <3.0.4
Fix Version 3.0.4
CVE Publish Date 5 months ago
Package Location /app/server/node_modules/graphql-request/node_modules/form-data/package.json
Field Value
Package npm / form-data
Affected Version 4.0.0
CVSS Score 9.4 (Critical)
EPSS Score 0.00062 (0.194)
Affected Version Range >=4.0.0, <4.0.4
Fix Version 4.0.4
CVE Publish Date 5 months ago
Package Location /app/server/node_modules/form-data/package.json

This PR bumps the 3.0.1 requirement from weaviate-ts-client to 3.0.4 via package resolution
This PR bumps the 4.0.0 to 4.0.4 coming from a host of deps.

info Reasons this module exists
   - Hoisted from "elevenlabs#form-data"
   - Hoisted from "cohere-ai#form-data"
   - Hoisted from "chromadb#cohere-ai#form-data"
   - Hoisted from "@anthropic-ai#sdk#@types#node-fetch#form-data"
   - Hoisted from "@datastax#astra-db-ts#axios#form-data"
   - Hoisted from "chromadb#voyageai#form-data"

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/Mintplex-Labs/anything-llm/pull/4761 **Author:** [@timothycarambat](https://github.com/timothycarambat) **Created:** 12/10/2025 **Status:** ✅ Merged **Merged:** 12/10/2025 **Merged by:** [@timothycarambat](https://github.com/timothycarambat) **Base:** `master` ← **Head:** `chore/form-data-bump` --- ### 📝 Commits (5) - [`8e79621`](https://github.com/Mintplex-Labs/anything-llm/commit/8e79621690631c9ae4fd0ab4283d9359dbd33a12) Bump packages - [`679b9df`](https://github.com/Mintplex-Labs/anything-llm/commit/679b9dffcf4037b342a2731c358e27fd4e467dcd) Merge branch 'master' of github.com:Mintplex-Labs/anything-llm into chore/form-data-bump - [`5dfd612`](https://github.com/Mintplex-Labs/anything-llm/commit/5dfd612ea65530a0e67bc9d1dc8e1b06d272b336) dev tag - [`caae174`](https://github.com/Mintplex-Labs/anything-llm/commit/caae174ecdfb52616c5e2874af036a1058d13ad9) dev tag rename - [`41c1fd0`](https://github.com/Mintplex-Labs/anything-llm/commit/41c1fd084c2567e77fd4790164e03ba529a8becb) Merge branch 'master' into chore/form-data-bump ### 📊 Changes **3 files changed** (+30 additions, -12 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/dev-build.yaml` (+2 -2) 📝 `server/package.json` (+4 -0) 📝 `server/yarn.lock` (+24 -10) </details> ### 📄 Description Docker Scout reports two critical-level CVEs coming from formdata Reported from CVE-2025-7783 Field | Value -- | -- Package | npm / form-data Affected Version | 3.0.1 CVSS Score | 9.4 (Critical) EPSS Score | 0.00062 (0.194) Affected Version Range | >=3.0.0, <3.0.4 Fix Version | 3.0.4 CVE Publish Date | 5 months ago Package Location | /app/server/node_modules/graphql-request/node_modules/form-data/package.json --- Field | Value -- | -- Package | npm / form-data Affected Version | 4.0.0 CVSS Score | 9.4 (Critical) EPSS Score | 0.00062 (0.194) Affected Version Range | >=4.0.0, <4.0.4 Fix Version | 4.0.4 CVE Publish Date | 5 months ago Package Location | /app/server/node_modules/form-data/package.json This PR bumps the 3.0.1 requirement from `weaviate-ts-client` to 3.0.4 via package resolution This PR bumps the 4.0.0 to 4.0.4 coming from a host of deps. ``` info Reasons this module exists - Hoisted from "elevenlabs#form-data" - Hoisted from "cohere-ai#form-data" - Hoisted from "chromadb#cohere-ai#form-data" - Hoisted from "@anthropic-ai#sdk#@types#node-fetch#form-data" - Hoisted from "@datastax#astra-db-ts#axios#form-data" - Hoisted from "chromadb#voyageai#form-data" ``` --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-02-22 18:36:28 -05:00
yindo closed this issue 2026-02-22 18:36:28 -05:00
yindo changed title from [PR #4761] Bump `form-data` version to [PR #4761] [MERGED] Bump `form-data` version 2026-06-05 15:20:13 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
Desktop
Docker
Integration Request
Integration Request
OS: Linux
OS: Mobile
OS: Windows
UI/UX
blocked
bug
bug
core-team-only
documentation
duplicate
embed-widget
enhancement
feature request
github_actions
good first issue
investigating
needs info / can't replicate
possible bug
pull-request
Mirrored from GitHub Pull Request
 question
stage: specifications
wontfix
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Mintplex-Labs/anything-llm#4756
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?