Upgrading ipx 1 to 2
Breaking1.3.2 → 2.1.2Breaking1Security1New3Changed9Fixed10Other2
SecurityModerateIPX Allows Path Traversal via Prefix Matching BypassGHSA-mm3p-j368-7jcr · CVE-2025-54387 ↗
BreakingUpgrade verdict
1 breaking change and a security fix.
In plain terms
- This version changes how the package is used, so existing code may need updates.
- IPX Allows Path Traversal via Prefix Matching Bypass
Must act 2 items need code or config changes
Adds citty ^0.1.5, h3 ^1.10.0, ofetch ^1.3.3, svgo ^3.2.0, unstorage ^1.10.1.
Drops node-fetch-native.
Installs 120 packages in all (was 92).
What you must change
Breaking1
Release includes multiple API changes; see the docs for the new usage guide and #171 for the v2 roadmap.
Security1
IPX Allows Path Traversal via Prefix Matching Bypass
Moderate