overleaf-cep

agw/overleaf-cep

Fork 0

mirror of https://github.com/yu-i-i/overleaf-cep.git synced 2026-11-12 13:13:45 +01:00

Commit Graph

Author	SHA1	Message	Date
Jakob Ackermann	81df324bcc	[monorepo] prepare for zod everywhere epic (#36027 ) GitOrigin-RevId: f082ae7fc7857fa72b2c1823645050bd4f6df305	2026-09-17 11:42:46 +00:00
Lucie GermainandClaude Opus 4.8	cc741ec2f1	[Security upgrade] bump multer 2.1.1 -> 2.2.0 (web + clsi) (#34916 ) GHSA-72gw-mp4g-v24j / CVE-2026-5079 — DoS via deeply nested field names, patched in 2.2.0. multer is a direct dep of web and clsi (file uploads). - bump multer to 2.2.0 in services/web and services/clsi - re-target the Overleaf local patch (attach files with no filename as 'undefined' instead of skipping) from 2.1.1 to 2.2.0, kept as a scoped root resolution to match the repo's patch convention Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> GitOrigin-RevId: 0d10137b521ebaacee71fc41adba32c4530a4041	2026-09-17 11:19:49 +00:00

Author

SHA1

Message

Date

Jakob Ackermann

81df324bcc

[monorepo] prepare for zod everywhere epic (#36027 )

GitOrigin-RevId: f082ae7fc7857fa72b2c1823645050bd4f6df305

2026-09-17 11:42:46 +00:00

Lucie GermainandClaude Opus 4.8

cc741ec2f1

[Security upgrade] bump multer 2.1.1 -> 2.2.0 (web + clsi) (#34916 )

GHSA-72gw-mp4g-v24j / CVE-2026-5079 — DoS via deeply nested field names,
patched in 2.2.0. multer is a direct dep of web and clsi (file uploads).

- bump multer to 2.2.0 in services/web and services/clsi
- re-target the Overleaf local patch (attach files with no filename as
  'undefined' instead of skipping) from 2.1.1 to 2.2.0, kept as a scoped
  root resolution to match the repo's patch convention

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
GitOrigin-RevId: 0d10137b521ebaacee71fc41adba32c4530a4041

2026-09-17 11:19:49 +00:00