What was reported:
Issue GetStream/stream-chat-js#1587 (closed, 8 comments): I'm looking to contribute a fix/enhancement to the 8.60.0 release of Stream Chat.
My changes are based around the state of the repository at commit [7bacecb](https://github.com/GetStream/stream-chat-js/commit/7bacecb008a9a10d495fe1f365d412f4056cbcec) (which I believe is part of the 8.60.0 release lineage).
However, when preparing to open a Pull Request, I noticed that branches typically associated with older releases, such as release/8.60 or 8.60, appear to be deleted or are not readily visible in the repository. The master (or main) branch is currently at version 9.11, which is...
What works:
If you are pinned to stream-chat v8 and need the form-data CVE-2025-7783 fix, upgrade to 8.61.0, which includes the patched dependency. As a stopgap, force form-data to 4.0.4 with your package manager's overrides (npm overrides, yarn resolutions, or pnpm.overrides).