mirror of
https://github.com/yu-i-i/overleaf-cep.git
synced 2026-11-13 05:33:43 +01:00
Lucie GermainandClaude Opus 4.8
cc741ec2f1
GHSA-72gw-mp4g-v24j / CVE-2026-5079 — DoS via deeply nested field names, patched in 2.2.0. multer is a direct dep of web and clsi (file uploads). - bump multer to 2.2.0 in services/web and services/clsi - re-target the Overleaf local patch (attach files with no filename as 'undefined' instead of skipping) from 2.1.1 to 2.2.0, kept as a scoped root resolution to match the repo's patch convention Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> GitOrigin-RevId: 0d10137b521ebaacee71fc41adba32c4530a4041
59 lines
1.9 KiB
JSON
59 lines
1.9 KiB
JSON
{
|
|
"name": "@overleaf/clsi",
|
|
"description": "A Node.js implementation of the CLSI LaTeX web-API",
|
|
"private": true,
|
|
"main": "app.js",
|
|
"type": "module",
|
|
"scripts": {
|
|
"start": "node app.js",
|
|
"test:acceptance:_run": "mocha --recursive --timeout 15000 --exit --retries=$RETRIES $@ test/acceptance/js",
|
|
"test:acceptance": "yarn run test:acceptance:_run -- --grep=$MOCHA_GREP",
|
|
"test:unit:_run": "vitest --config ./vitest.config.unit.cjs",
|
|
"test:unit": "yarn run test:unit:_run",
|
|
"nodemon": "node --watch app.js",
|
|
"lint": "eslint --cache --cache-location ../../.cache/eslint/ --max-warnings 0 --format unix .",
|
|
"lint:fix": "eslint --cache --cache-location ../../.cache/eslint/ --fix .",
|
|
"types:check": "tsc --noEmit"
|
|
},
|
|
"dependencies": {
|
|
"@overleaf/fetch-utils": "workspace:*",
|
|
"@overleaf/logger": "workspace:*",
|
|
"@overleaf/metrics": "workspace:*",
|
|
"@overleaf/o-error": "workspace:*",
|
|
"@overleaf/promise-utils": "workspace:*",
|
|
"@overleaf/settings": "workspace:*",
|
|
"@overleaf/stream-utils": "workspace:*",
|
|
"@overleaf/validation-tools": "workspace:*",
|
|
"archiver": "5.3.2",
|
|
"async": "^3.2.5",
|
|
"bunyan": "^1.8.15",
|
|
"dockerode": "^4.0.9",
|
|
"express": "4.22.1",
|
|
"lodash": "^4.18.1",
|
|
"minimatch": "^10.2.5",
|
|
"multer": "2.2.0",
|
|
"overleaf-editor-core": "workspace:*",
|
|
"p-limit": "^3.1.0",
|
|
"send": "^0.19.0",
|
|
"tar-fs": "^3.1.1",
|
|
"workerpool": "^6.1.5"
|
|
},
|
|
"devDependencies": {
|
|
"@istanbuljs/esm-loader-hook": "^0.3.0",
|
|
"chai": "^4.3.6",
|
|
"chai-as-promised": "^7.1.1",
|
|
"form-data": "^4.0.5",
|
|
"mocha": "^11.1.0",
|
|
"mocha-junit-reporter": "^2.2.1",
|
|
"mocha-multi-reporters": "^1.5.1",
|
|
"node-fetch": "^2.7.0",
|
|
"nyc": "^17.1.0",
|
|
"sinon": "~9.0.1",
|
|
"sinon-chai": "^3.7.0",
|
|
"timekeeper": "2.2.0",
|
|
"typescript": "^5.0.4",
|
|
"vitest": "4.1.5",
|
|
"yauzl": "^2.10.0"
|
|
}
|
|
}
|