mirror of
https://gh-proxy.org/https://github.com/klinsmaya/sub2api.git
synced 2026-11-08 15:07:55 +08:00
Resolves GHSA-hmw2-7cc7-3qxx (CRLF injection) flagged by frontend-security CI. axios pulls form-data ^4.0.5 which locked to the vulnerable 4.0.5; override forces all transitive consumers to 4.0.6+ without needing an audit exception.