4.9.3

expressjs/express4.9.3Sep 18, 2014by dougwilson

AI Summary

Express 4.9.3 is a patch release that updates the proxy-addr dependency to fix a global leak vulnerability when multiple subnets are trusted, along with updating the ipaddr.js sub-dependency.

Key Highlights

  • Updated proxy-addr to version ~1.0.2
  • Fixed a global leak bug when multiple subnets are trusted
  • Updated ipaddr.js sub-dependency to version 0.1.3

Full Release Notes

- deps: proxy-addr@~1.0.2
  - Fix a global leak when multiple subnets are trusted
  - deps: ipaddr.js@0.1.3