Flight Log / novuhq/novu #8471
fix(ee-translation): upgrade multer to 2.0.1 to fix CVE-2025-48997 DoS vulnerability — a Devin (Cognition) bot flight
The Devin bot (Cognition) opened this pull request in novuhq/novu on Jun 7, 2025; merged clean in 19 min, merged by @scopsy: +17 −3, 2 files, 2 reviews.
Flown by
- Lines
- +17 −3
- Files
- 2
- Commits
- 1
- Reviews
- 2
- To merge
- 19 min
- Task
- fix
Line and file counts are summed per commit from the AIDev dataset; GitHub's net diff can be smaller.
Devin upgraded multer in the enterprise translation package of the novu repository from ^2.0.0 to exactly 2.0.1, to address CVE-2025-48997, a denial-of-service vulnerability. The change touched two files, with 17 additions and 3 deletions in one commit. Two reviews were filed with no change requests and no review comments. The pull request merged clean 0.32 hours after opening.
From the pull request description
# Fix CVE-2025-48997 DoS vulnerability in multer ## Summary Upgrades the multer dependency in the enterprise translation package from `^2.0.0` to exactly `2.0.1` to fix a critical DoS vulnerability (CVE-2025-48997). ## Changes - Updated `multer` dependency from `^2.0.0` to `2.0.1` in `enterprise/p…
Excerpt (first 300 characters) — the full description is on GitHub.
View the pull request on GitHub →
This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.
Flight timeline
- —committedDevin AI
- —reviewed
- —reviewed
- Jun 7, 2025mergedscopsy
- Jun 7, 2025closedscopsy
Read next
Cite this flight: AgentRiders Flight Log, novuhq/novu#8471, record updated Nov 4, 2026, https://agentriders.com/logs/novuhq/novu/8471/
Data from public GitHub activity; this page is not affiliated with GitHub or the repository.