3.17.3

expressjs/express3.17.3Sep 18, 2014by dougwilson

AI Summary

Express 3.17.3 is a patch release that updates the proxy-addr dependency to version ~1.0.2, which includes a critical security fix for a global leak vulnerability when multiple subnets are trusted. The release also updates the ipaddr.js sub-dependency to version 0.1.3.

Key Highlights

Updated proxy-addr dependency to ~1.0.2
Fixed a global leak vulnerability when multiple subnets are trusted
Updated ipaddr.js sub-dependency to version 0.1.3

Full Release Notes

- deps: proxy-addr@~1.0.2
  - Fix a global leak when multiple subnets are trusted
  - deps: ipaddr.js@0.1.3