security(deps): upgrade busboy to fix multipart denial of service

Override Busboy to use a patched version and refresh the lockfile to resolve CVE-2026-19481 and CVE-2026-19484 in production images.
2026-11-03 00:11:37 -06:00 · 2026-10-03 17:19:41 +00:00
parent df926fdf0f
commit 8fecae94e6
2 changed files with 6 additions and 4 deletions
@@ -3,6 +3,7 @@ packages:
  - "server"
  - "packages/*"
 overrides:
+  "@fastify/busboy": ^3.2.1
  "@xhmikosr/decompress": ^11.1.4
  "@esbuild-kit/core-utils>esbuild": ^0.25.12
  "@nestjs/swagger>js-yaml": ^5.3.0