SnapOtter
20ab04c5bd
fix(security): revert archiver v8 and @fastify/static v9 upgrades
...
archiver v8 changed its default export, breaking all ZIP-producing
tools (pdf-to-image, split, batch, favicon, bulk-rename, svg-to-raster).
Reverted to v7 -- the lodash vulnerability via archiver is _.template
which is never called directly.
@fastify/static v9 has breaking changes incompatible with the current
static file serving setup. Reverted to v8 -- the path traversal CVEs
in v8 are mitigated by the existing path traversal guards in files.ts.
Updated edge-cases test to expect 400 for >64KB settings payloads
(new security limit).
2026-05-14 16:59:40 +08:00
..
2026-05-12 23:19:20 +08:00
2026-05-09 18:02:58 +08:00
2026-05-12 23:19:20 +08:00
2026-05-12 23:19:20 +08:00
2026-05-12 23:19:20 +08:00
2026-04-24 23:50:47 +08:00
2026-05-13 15:47:28 +08:00
2026-04-29 23:47:19 +08:00
2026-04-22 18:10:04 +08:00
2026-05-07 19:41:30 +08:00
2026-05-12 23:19:20 +08:00
2026-04-22 18:10:04 +08:00
2026-04-22 18:10:04 +08:00
2026-04-22 18:10:04 +08:00
2026-05-09 09:02:29 +08:00
2026-05-13 10:05:42 +08:00
2026-05-08 21:10:39 +08:00
2026-05-01 19:51:47 +08:00
2026-05-09 18:02:58 +08:00
2026-05-09 18:02:58 +08:00
2026-05-09 09:02:29 +08:00
2026-05-09 18:02:58 +08:00
2026-05-08 15:18:38 +08:00
2026-05-09 18:02:58 +08:00
2026-05-01 19:51:47 +08:00
2026-05-09 09:02:29 +08:00
2026-05-09 09:02:29 +08:00
2026-05-11 17:33:51 +08:00
2026-04-26 12:03:08 +08:00
2026-05-01 19:51:47 +08:00
2026-05-11 21:57:40 +08:00
2026-05-01 19:51:47 +08:00
2026-04-22 18:10:04 +08:00
2026-04-22 18:10:04 +08:00
2026-04-24 18:06:29 +08:00
2026-05-14 16:59:40 +08:00
2026-05-01 19:51:47 +08:00
2026-05-01 19:51:47 +08:00
2026-05-13 13:45:08 +08:00
2026-04-22 18:10:04 +08:00
2026-05-09 18:02:58 +08:00
2026-05-12 03:58:42 +08:00
2026-05-13 11:35:33 +08:00
2026-05-01 02:26:52 +08:00
2026-05-09 19:52:11 +08:00
2026-05-09 09:02:29 +08:00
2026-05-12 03:58:42 +08:00
2026-04-26 12:03:08 +08:00
2026-05-09 19:52:11 +08:00
2026-05-09 18:02:58 +08:00
2026-05-11 22:47:10 +08:00
2026-05-09 18:02:58 +08:00
2026-05-08 16:13:34 +08:00
2026-05-08 15:17:18 +08:00
2026-05-01 19:51:47 +08:00
2026-05-01 19:51:47 +08:00
2026-05-09 18:02:58 +08:00
2026-04-22 18:10:04 +08:00
2026-05-01 19:51:47 +08:00
2026-04-26 12:03:08 +08:00
2026-04-22 18:10:04 +08:00
2026-05-13 10:05:42 +08:00
2026-05-09 09:02:29 +08:00
2026-05-09 18:02:58 +08:00
2026-05-07 19:41:30 +08:00
2026-04-22 18:10:04 +08:00
2026-05-01 19:51:47 +08:00
2026-05-01 19:51:47 +08:00
2026-05-09 18:02:58 +08:00
2026-05-01 19:51:47 +08:00
2026-05-13 16:59:13 +08:00
2026-05-01 19:51:47 +08:00
2026-05-13 21:33:50 +08:00
2026-05-13 21:33:50 +08:00
2026-05-09 09:02:29 +08:00
2026-05-09 18:02:58 +08:00
2026-05-09 09:02:29 +08:00
2026-05-09 18:02:58 +08:00
2026-05-09 09:02:29 +08:00
2026-05-09 09:02:29 +08:00
2026-05-12 23:19:20 +08:00
2026-03-26 01:10:51 +08:00
2026-05-11 21:24:56 +08:00
2026-05-09 18:02:58 +08:00
2026-05-13 16:18:28 +08:00
2026-05-01 19:51:47 +08:00
2026-05-09 09:02:29 +08:00
2026-05-09 18:02:58 +08:00
2026-05-09 18:02:58 +08:00
2026-05-09 18:02:58 +08:00