v1.4.394

danielmiessler/Fabricv1.4.394Jan 25, 2026by github-actions[bot]

AI Summary

Critical security fixes for npm dependencies including form-data, glob, and qs upgrades. Also fixed ollama authentication vulnerability and added npm support.

Key Highlights

Fixed critical npm vulnerabilities including form-data upgrade to 4.0.5
Fixed critical ollama authentication vulnerability by updating from v0.13.5 to v0.15.1
Added npm support with package-lock.json for dual package manager compatibility
Fixed medium severity esbuild vulnerability

New Features

Critical security vulnerability fixes
Ollama authentication vulnerability fix
Dual package manager support

Full Release Notes

## Changes

### PR [#1971](https://github.com/danielmiessler/Fabric/pull/1971) by [ksylvan](https://github.com/ksylvan): Security fix high medium low priority dependabot alerts for npm dependencies

- Fixed medium severity esbuild vulnerability that allowed websites to send requests to development server and read responses
- Updated esbuild from vulnerable version 0.21.5 to secure version 0.27.2
- Fixed low severity @eslint/plugin-kit ReDoS vulnerability through ConfigCommentParser
- Updated @eslint/plugin-kit from vulnerable version 0.2.8 to secure version 0.5.1
- Verified all builds and tests pass successfully after security updates