mirror of
https://github.com/Wei-Shaw/sub2api.git
synced 2026-09-24 16:05:44 +08:00
Resolves GHSA-hmw2-7cc7-3qxx (CRLF injection) flagged by frontend-security CI. axios pulls form-data ^4.0.5 which locked to the vulnerable 4.0.5; override forces all transitive consumers to 4.0.6+ without needing an audit exception.