Repository navigation
fix vulnerabilities and upgrade packages #25
Description
Fix the Vuln listed down Below
| Dependency | Current vulnerable range | Required upgrade | Vulnerability |
|---|---|---|---|
| form-data | >= 4.0.0 < 4.0.4 | ~> 4.0.4 | CVE-2025-7783 — Critical |
Recommended Upgrade List
Instead of treating every CVE separately, you can address most of the reported issues by upgrading these 7 dependencies:
form-data → 4.0.4+
axios → 1.8.2+
vite → 4.5.4+
rollup → 3.29.5+
esbuild → 0.25.0+
@babel/runtime → 7.26.10+
js-yaml → 4.1.1+Priority order
1. form-data 🔴 Critical
2. axios 🟠 High
3. vite 🟠 High
4. rollup 🟠 High
5. js-yaml 🟠 High
6. esbuild 🟡 Moderate
7. @babel/runtime 🟡 ModerateMetadata
Metadata
Assignees
Labels
No labels
Activity
umesh-khatiwada commentedon Sep 22, 2026
PR is merged and closed