JDSS/mem0
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(form-data): upgrade to >=4.0.6 across pnpm workspaces (CVE-2026-12143) (#5618)

Browse Source 
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Harsh Vardhan Gupta
2026-06-18 13:44:05 +05:30
committed by GitHub
co-authored by Claude Opus 4.8
parent 0117d5838b
commit 96b31c4bc0
14 changed files with 37 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
integrations/openclaw/package.json
+1
View File
@@ -64,6 +64,7 @@
}, },
"pnpm": { "pnpm": {
"overrides": { "overrides": {
"form-data@<4.0.6": ">=4.0.6",
"protobufjs@<7.5.5": "^7.5.5", "protobufjs@<7.5.5": "^7.5.5",
"vite": "^8.0.5", "vite": "^8.0.5",
"langsmith@<0.6.0": "^0.6.0", "langsmith@<0.6.0": "^0.6.0",
integrations/openclaw/pnpm-lock.yaml
Generated
+6 -5
View File
@@ -5,6 +5,7 @@ settings:
excludeLinksFromLockfile: false excludeLinksFromLockfile: false
overrides: overrides:
form-data@<4.0.6: '>=4.0.6'
protobufjs@<7.5.5: ^7.5.5 protobufjs@<7.5.5: ^7.5.5
vite: ^8.0.5 vite: ^8.0.5
langsmith@<0.6.0: ^0.6.0 langsmith@<0.6.0: ^0.6.0
@@ -1109,8 +1110,8 @@ packages:
form-data-encoder@1.7.2: form-data-encoder@1.7.2:
resolution: {integrity: sha512-qfqtYan3rxrnCk1VYaA4H+Ms9xdpPqvLZa6xmMgFvhO32x7/3J/ExcTd6qpxM0vH2GdMI+poehyBZvqfMTto8A==} resolution: {integrity: sha512-qfqtYan3rxrnCk1VYaA4H+Ms9xdpPqvLZa6xmMgFvhO32x7/3J/ExcTd6qpxM0vH2GdMI+poehyBZvqfMTto8A==}
form-data@4.0.5: form-data@4.0.6:
resolution: {integrity: sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==} resolution: {integrity: sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==}
engines: {node: '>= 6'} engines: {node: '>= 6'}
formdata-node@4.4.1: formdata-node@4.4.1:
@@ -2728,7 +2729,7 @@ snapshots:
'@types/node-fetch@2.6.13': '@types/node-fetch@2.6.13':
dependencies: dependencies:
'@types/node': 22.19.20 '@types/node': 22.19.20
form-data: 4.0.5 form-data: 4.0.6
'@types/node@18.19.130': '@types/node@18.19.130':
dependencies: dependencies:
@@ -2870,7 +2871,7 @@ snapshots:
axios@1.17.0: axios@1.17.0:
dependencies: dependencies:
follow-redirects: 1.16.0 follow-redirects: 1.16.0
form-data: 4.0.5 form-data: 4.0.6
https-proxy-agent: 5.0.1 https-proxy-agent: 5.0.1
proxy-from-env: 2.1.0 proxy-from-env: 2.1.0
transitivePeerDependencies: transitivePeerDependencies:
@@ -3131,7 +3132,7 @@ snapshots:
form-data-encoder@1.7.2: {} form-data-encoder@1.7.2: {}
form-data@4.0.5: form-data@4.0.6:
dependencies: dependencies:
asynckit: 0.4.0 asynckit: 0.4.0
combined-stream: 1.0.8 combined-stream: 1.0.8
integrations/openclaw/pnpm-workspace.yaml
+1
View File
@@ -13,6 +13,7 @@ onlyBuiltDependencies:
- protobufjs - protobufjs
overrides: overrides:
"form-data@<4.0.6": ">=4.0.6"
"protobufjs@<7.5.5": "^7.5.5" "protobufjs@<7.5.5": "^7.5.5"
"vite": "^8.0.5" "vite": "^8.0.5"
"langsmith@<0.6.0": "^0.6.0" "langsmith@<0.6.0": "^0.6.0"
integrations/pi-agent-plugin/package.json
+1
View File
@@ -71,6 +71,7 @@
}, },
"pnpm": { "pnpm": {
"overrides": { "overrides": {
"form-data@<4.0.6": ">=4.0.6",
"uuid@<11.1.1": ">=11.1.1", "uuid@<11.1.1": ">=11.1.1",
"esbuild": ">=0.28.1" "esbuild": ">=0.28.1"
} }
integrations/pi-agent-plugin/pnpm-lock.yaml
Generated
+6 -5
View File
@@ -5,6 +5,7 @@ settings:
excludeLinksFromLockfile: false excludeLinksFromLockfile: false
overrides: overrides:
form-data@<4.0.6: '>=4.0.6'
uuid@<11.1.1: '>=11.1.1' uuid@<11.1.1: '>=11.1.1'
esbuild: '>=0.28.1' esbuild: '>=0.28.1'
@@ -1368,8 +1369,8 @@ packages:
form-data-encoder@1.7.2: form-data-encoder@1.7.2:
resolution: {integrity: sha512-qfqtYan3rxrnCk1VYaA4H+Ms9xdpPqvLZa6xmMgFvhO32x7/3J/ExcTd6qpxM0vH2GdMI+poehyBZvqfMTto8A==} resolution: {integrity: sha512-qfqtYan3rxrnCk1VYaA4H+Ms9xdpPqvLZa6xmMgFvhO32x7/3J/ExcTd6qpxM0vH2GdMI+poehyBZvqfMTto8A==}
form-data@4.0.5: form-data@4.0.6:
resolution: {integrity: sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==} resolution: {integrity: sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==}
engines: {node: '>= 6'} engines: {node: '>= 6'}
formdata-node@4.4.1: formdata-node@4.4.1:
@@ -3474,7 +3475,7 @@ snapshots:
'@types/node-fetch@2.6.13': '@types/node-fetch@2.6.13':
dependencies: dependencies:
'@types/node': 25.9.2 '@types/node': 25.9.2
form-data: 4.0.5 form-data: 4.0.6
'@types/node@18.19.130': '@types/node@18.19.130':
dependencies: dependencies:
@@ -3598,7 +3599,7 @@ snapshots:
axios@1.17.0: axios@1.17.0:
dependencies: dependencies:
follow-redirects: 1.16.0 follow-redirects: 1.16.0
form-data: 4.0.5 form-data: 4.0.6
https-proxy-agent: 5.0.1 https-proxy-agent: 5.0.1
proxy-from-env: 2.1.0 proxy-from-env: 2.1.0
transitivePeerDependencies: transitivePeerDependencies:
@@ -3891,7 +3892,7 @@ snapshots:
form-data-encoder@1.7.2: {} form-data-encoder@1.7.2: {}
form-data@4.0.5: form-data@4.0.6:
dependencies: dependencies:
asynckit: 0.4.0 asynckit: 0.4.0
combined-stream: 1.0.8 combined-stream: 1.0.8
integrations/pi-agent-plugin/pnpm-workspace.yaml
+1
View File
@@ -2,5 +2,6 @@ packages:
- '.' - '.'
overrides: overrides:
"form-data@<4.0.6": ">=4.0.6"
"uuid@<11.1.1": ">=11.1.1" "uuid@<11.1.1": ">=11.1.1"
"esbuild": ">=0.28.1" "esbuild": ">=0.28.1"
mem0-ts/package.json
+1
View File
@@ -139,6 +139,7 @@
"better-sqlite3" "better-sqlite3"
], ],
"overrides": { "overrides": {
"form-data@<4.0.6": ">=4.0.6",
"picomatch@<2.3.2": "^2.3.2", "picomatch@<2.3.2": "^2.3.2",
"picomatch@>=4.0.0 <4.0.4": "^4.0.4", "picomatch@>=4.0.0 <4.0.4": "^4.0.4",
"jws@4.0.0": "4.0.1", "jws@4.0.0": "4.0.1",
mem0-ts/pnpm-lock.yaml
Generated
+6 -5
View File
@@ -5,6 +5,7 @@ settings:
excludeLinksFromLockfile: false excludeLinksFromLockfile: false
overrides: overrides:
form-data@<4.0.6: '>=4.0.6'
picomatch@<2.3.2: ^2.3.2 picomatch@<2.3.2: ^2.3.2
picomatch@>=4.0.0 <4.0.4: ^4.0.4 picomatch@>=4.0.0 <4.0.4: ^4.0.4
jws@4.0.0: 4.0.1 jws@4.0.0: 4.0.1
@@ -1554,8 +1555,8 @@ packages:
form-data-encoder@1.7.2: form-data-encoder@1.7.2:
resolution: {integrity: sha512-qfqtYan3rxrnCk1VYaA4H+Ms9xdpPqvLZa6xmMgFvhO32x7/3J/ExcTd6qpxM0vH2GdMI+poehyBZvqfMTto8A==} resolution: {integrity: sha512-qfqtYan3rxrnCk1VYaA4H+Ms9xdpPqvLZa6xmMgFvhO32x7/3J/ExcTd6qpxM0vH2GdMI+poehyBZvqfMTto8A==}
form-data@4.0.5: form-data@4.0.6:
resolution: {integrity: sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==} resolution: {integrity: sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==}
engines: {node: '>= 6'} engines: {node: '>= 6'}
formdata-node@4.4.1: formdata-node@4.4.1:
@@ -3972,7 +3973,7 @@ snapshots:
'@types/node-fetch@2.6.13': '@types/node-fetch@2.6.13':
dependencies: dependencies:
'@types/node': 22.19.21 '@types/node': 22.19.21
form-data: 4.0.5 form-data: 4.0.6
'@types/node@18.19.130': '@types/node@18.19.130':
dependencies: dependencies:
@@ -4078,7 +4079,7 @@ snapshots:
axios@1.17.0: axios@1.17.0:
dependencies: dependencies:
follow-redirects: 1.16.0 follow-redirects: 1.16.0
form-data: 4.0.5 form-data: 4.0.6
https-proxy-agent: 5.0.1 https-proxy-agent: 5.0.1
proxy-from-env: 2.1.0 proxy-from-env: 2.1.0
transitivePeerDependencies: transitivePeerDependencies:
@@ -4561,7 +4562,7 @@ snapshots:
form-data-encoder@1.7.2: {} form-data-encoder@1.7.2: {}
form-data@4.0.5: form-data@4.0.6:
dependencies: dependencies:
asynckit: 0.4.0 asynckit: 0.4.0
combined-stream: 1.0.8 combined-stream: 1.0.8
mem0-ts/pnpm-workspace.yaml
+1
View File
@@ -6,6 +6,7 @@ onlyBuiltDependencies:
- better-sqlite3 - better-sqlite3
overrides: overrides:
"form-data@<4.0.6": ">=4.0.6"
"picomatch@<2.3.2": "^2.3.2" "picomatch@<2.3.2": "^2.3.2"
"picomatch@>=4.0.0 <4.0.4": "^4.0.4" "picomatch@>=4.0.0 <4.0.4": "^4.0.4"
"jws@4.0.0": "4.0.1" "jws@4.0.0": "4.0.1"
openmemory/ui/package.json
+1
View File
@@ -81,6 +81,7 @@
"sharp" "sharp"
], ],
"overrides": { "overrides": {
"form-data@<4.0.6": ">=4.0.6",
"immutable@>=5.0.0 <5.1.5": "^5.1.5", "immutable@>=5.0.0 <5.1.5": "^5.1.5",
"picomatch@<2.3.2": "^2.3.2", "picomatch@<2.3.2": "^2.3.2",
"minimatch@>=9.0.0 <9.0.7": "^9.0.7", "minimatch@>=9.0.0 <9.0.7": "^9.0.7",
openmemory/ui/pnpm-lock.yaml
Generated
+5 -4
View File
@@ -5,6 +5,7 @@ settings:
excludeLinksFromLockfile: false excludeLinksFromLockfile: false
overrides: overrides:
form-data@<4.0.6: '>=4.0.6'
immutable@>=5.0.0 <5.1.5: ^5.1.5 immutable@>=5.0.0 <5.1.5: ^5.1.5
picomatch@<2.3.2: ^2.3.2 picomatch@<2.3.2: ^2.3.2
minimatch@>=9.0.0 <9.0.7: ^9.0.7 minimatch@>=9.0.0 <9.0.7: ^9.0.7
@@ -1476,8 +1477,8 @@ packages:
debug: debug:
optional: true optional: true
form-data@4.0.5: form-data@4.0.6:
resolution: {integrity: sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==} resolution: {integrity: sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==}
engines: {node: '>= 6'} engines: {node: '>= 6'}
fraction.js@5.3.4: fraction.js@5.3.4:
@@ -3032,7 +3033,7 @@ snapshots:
axios@1.17.0: axios@1.17.0:
dependencies: dependencies:
follow-redirects: 1.16.0 follow-redirects: 1.16.0
form-data: 4.0.5 form-data: 4.0.6
https-proxy-agent: 5.0.1 https-proxy-agent: 5.0.1
proxy-from-env: 2.1.0 proxy-from-env: 2.1.0
transitivePeerDependencies: transitivePeerDependencies:
@@ -3235,7 +3236,7 @@ snapshots:
follow-redirects@1.16.0: {} follow-redirects@1.16.0: {}
form-data@4.0.5: form-data@4.0.6:
dependencies: dependencies:
asynckit: 0.4.0 asynckit: 0.4.0
combined-stream: 1.0.8 combined-stream: 1.0.8
openmemory/ui/pnpm-workspace.yaml
+1
View File
@@ -6,6 +6,7 @@ onlyBuiltDependencies:
- sharp - sharp
overrides: overrides:
"form-data@<4.0.6": ">=4.0.6"
"immutable@>=5.0.0 <5.1.5": "^5.1.5" "immutable@>=5.0.0 <5.1.5": "^5.1.5"
"picomatch@<2.3.2": "^2.3.2" "picomatch@<2.3.2": "^2.3.2"
"minimatch@>=9.0.0 <9.0.7": "^9.0.7" "minimatch@>=9.0.0 <9.0.7": "^9.0.7"
server/dashboard/pnpm-lock.yaml
Generated
+5 -4
View File
@@ -5,6 +5,7 @@ settings:
excludeLinksFromLockfile: false excludeLinksFromLockfile: false
overrides: overrides:
form-data@<4.0.6: '>=4.0.6'
postcss@<8.5.10: '>=8.5.10' postcss@<8.5.10: '>=8.5.10'
prismjs@<1.30.0: '>=1.30.0' prismjs@<1.30.0: '>=1.30.0'
uuid@<11.1.1: '>=11.1.1' uuid@<11.1.1: '>=11.1.1'
@@ -1961,8 +1962,8 @@ packages:
resolution: {integrity: sha512-dKx12eRCVIzqCxFGplyFKJMPvLEWgmNtUrpTiJIR5u97zEhRG8ySrtboPHZXx7daLxQVrl643cTzbab2tkQjxg==} resolution: {integrity: sha512-dKx12eRCVIzqCxFGplyFKJMPvLEWgmNtUrpTiJIR5u97zEhRG8ySrtboPHZXx7daLxQVrl643cTzbab2tkQjxg==}
engines: {node: '>= 0.4'} engines: {node: '>= 0.4'}
form-data@4.0.5: form-data@4.0.6:
resolution: {integrity: sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==} resolution: {integrity: sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==}
engines: {node: '>= 6'} engines: {node: '>= 6'}
format@0.2.2: format@0.2.2:
@@ -4329,7 +4330,7 @@ snapshots:
axios@1.17.0: axios@1.17.0:
dependencies: dependencies:
follow-redirects: 1.16.0 follow-redirects: 1.16.0
form-data: 4.0.5 form-data: 4.0.6
https-proxy-agent: 5.0.1 https-proxy-agent: 5.0.1
proxy-from-env: 2.1.0 proxy-from-env: 2.1.0
transitivePeerDependencies: transitivePeerDependencies:
@@ -4949,7 +4950,7 @@ snapshots:
dependencies: dependencies:
is-callable: 1.2.7 is-callable: 1.2.7
form-data@4.0.5: form-data@4.0.6:
dependencies: dependencies:
asynckit: 0.4.0 asynckit: 0.4.0
combined-stream: 1.0.8 combined-stream: 1.0.8
server/dashboard/pnpm-workspace.yaml
+1
View File
@@ -2,6 +2,7 @@ packages:
- '.' - '.'
overrides: overrides:
"form-data@<4.0.6": ">=4.0.6"
"postcss@<8.5.10": ">=8.5.10" "postcss@<8.5.10": ">=8.5.10"
"prismjs@<1.30.0": ">=1.30.0" "prismjs@<1.30.0": ">=1.30.0"
"uuid@<11.1.1": ">=11.1.1" "uuid@<11.1.1": ">=11.1.1"