From 362710b01406f653cb8ec5cb38c8b0218396c2a1 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 29 Mar 2025 07:44:09 +0000 Subject: [PATCH] fix: frontend/package.json & frontend/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-9403194 --- frontend/package-lock.json | 18 ++++++++++-------- frontend/package.json | 2 +- 2 files changed, 11 insertions(+), 9 deletions(-) diff --git a/frontend/package-lock.json b/frontend/package-lock.json index d654f41..ccfc219 100644 --- a/frontend/package-lock.json +++ b/frontend/package-lock.json @@ -9,7 +9,7 @@ "version": "0.0.1", "dependencies": { "@sveltejs/adapter-node": "^1.2.0", - "axios": "^1.3.4", + "axios": "^1.8.3", "daisyui": "^2.51.5", "svelte-dialogs": "^1.2.2", "svelte-icons": "^2.1.0", @@ -1314,11 +1314,12 @@ } }, "node_modules/axios": { - "version": "1.3.6", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.3.6.tgz", - "integrity": "sha512-PEcdkk7JcdPiMDkvM4K6ZBRYq9keuVJsToxm2zQIM70Qqo2WHTdJZMXcG9X+RmRp2VPNUQC8W1RAGbgt6b1yMg==", + "version": "1.8.3", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.8.3.tgz", + "integrity": "sha512-iP4DebzoNlP/YN2dpwCgb8zoCmhtkajzS48JvwmkSkXvPI3DHc7m+XYL5tGnSlJtR6nImXZmdCuN5aP8dh1d8A==", + "license": "MIT", "dependencies": { - "follow-redirects": "^1.15.0", + "follow-redirects": "^1.15.6", "form-data": "^4.0.0", "proxy-from-env": "^1.1.0" } @@ -2654,15 +2655,16 @@ "dev": true }, "node_modules/follow-redirects": { - "version": "1.15.2", - "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.2.tgz", - "integrity": "sha512-VQLG33o04KaQ8uYi2tVNbdrWp1QWxNNea+nmIB4EVM28v0hmP17z7aG1+wAkNzVq4KeXTq3221ye5qTJP91JwA==", + "version": "1.15.9", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.9.tgz", + "integrity": "sha512-gew4GsXizNgdoRyqmyfMHyAmXsZDk6mHkSxZFCzW9gwlbtOW44CDtYavM+y+72qD/Vq2l550kMF52DT8fOLJqQ==", "funding": [ { "type": "individual", "url": "https://github.com/sponsors/RubenVerborgh" } ], + "license": "MIT", "engines": { "node": ">=4.0" }, diff --git a/frontend/package.json b/frontend/package.json index 1807b26..ff9767f 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -42,7 +42,7 @@ "type": "module", "dependencies": { "@sveltejs/adapter-node": "^1.2.0", - "axios": "^1.3.4", + "axios": "^1.8.3", "daisyui": "^2.51.5", "svelte-dialogs": "^1.2.2", "svelte-icons": "^2.1.0",