paul/picpeak
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

security: fix 20 dependency vulnerabilities (backport to main)

Browse Source 
Same fixes as beta PR #274. Updates handlebars, nodemailer, tar,
fast-xml-parser, brace-expansion, path-to-regexp, and lodash to
address 20 GitHub code scanning alerts.
This commit is contained in:
Paul Nothaft
2026-04-08 09:05:48 +02:00
parent ff9fb64e75
commit 730912a3f4
1 changed files with 8 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/package.json
+8 -6
View File
@@ -31,7 +31,7 @@
"express-validator": "^7.0.1", "express-validator": "^7.0.1",
"fluent-ffmpeg": "^2.1.3", "fluent-ffmpeg": "^2.1.3",
"form-data": "^4.0.4", "form-data": "^4.0.4",
"handlebars": "^4.7.8", "handlebars": "^4.7.9",
"helmet": "^7.0.0", "helmet": "^7.0.0",
"i18next": "25.3.2", "i18next": "25.3.2",
"i18next-browser-languagedetector": "^8.2.0", "i18next-browser-languagedetector": "^8.2.0",
@@ -44,7 +44,7 @@
"mime-types": "^3.0.1", "mime-types": "^3.0.1",
"multer": "^2.0.2", "multer": "^2.0.2",
"node-cron": "^3.0.2", "node-cron": "^3.0.2",
"nodemailer": "^7.0.10", "nodemailer": "^7.0.13",
"pg": "^8.16.3", "pg": "^8.16.3",
"react-i18next": "^15.6.0", "react-i18next": "^15.6.0",
"sanitize-html": "^2.17.0", "sanitize-html": "^2.17.0",
@@ -67,10 +67,12 @@
}, },
"glob": "^11.1.0", "glob": "^11.1.0",
"js-yaml": "^4.1.1", "js-yaml": "^4.1.1",
"fast-xml-parser": ">=5.3.8", "fast-xml-parser": ">=5.5.10",
"qs": ">=6.14.2", "qs": ">=6.14.2",
"tar": ">=7.5.8", "tar": ">=7.5.13",
"brace-expansion": ">=5.0.0", "brace-expansion": ">=5.0.5",
"minimatch": ">=9.0.7" "minimatch": ">=9.0.7",
"path-to-regexp": "0.1.13",
"lodash": ">=4.18.1"
} }
} }