Paul Nothaft 681b440381 security: pin axios to 1.14.0 to prevent supply chain attack ...

Axios versions 1.14.1 and 0.30.4 were compromised on March 31, 2026
with a RAT dropper attributed to North Korean threat actor. Pin to
exact 1.14.0 (latest safe release) to prevent resolution to compromised
versions. See https://github.com/axios/axios/issues/10604

2026-04-05 18:41:45 +02:00

..

public

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

scripts

Fix mobile overlay and deps per #43

2025-10-29 12:19:43 +01:00

src

fix(security): invalidate tokens on password change, enforce session timeout, fix role update

2026-03-16 22:36:52 +01:00

.dockerignore

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

.env.example

fix: resolve port configuration issues and database column mismatch

2025-08-24 11:11:53 +02:00

.env.production.example

chore: consolidate and update deployment documentation

2025-07-24 16:57:07 +02:00

.gitignore

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

audit-frontend.json

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

Dockerfile

fix(security): resolve Docker image CVEs for code scanning alerts

2026-03-02 23:06:15 +01:00

Dockerfile.dev

Fix security vulnerabilities detected by Trivy

2025-11-25 20:35:59 +00:00

Dockerfile.prod

fix(security): resolve Docker image CVEs for code scanning alerts

2026-03-02 23:06:15 +01:00

eslint.config.js

Fix mobile overlay and deps per #43

2025-10-29 12:19:43 +01:00

index.html

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

nginx.conf

security: comprehensive hardening across frontend, backend, and infrastructure

2026-02-16 22:33:20 +01:00

nginx.dev.conf

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

package-lock.json

security: pin axios to 1.14.0 to prevent supply chain attack

2026-04-05 18:41:45 +02:00

package.json

security: pin axios to 1.14.0 to prevent supply chain attack

2026-04-05 18:41:45 +02:00

postcss.config.js

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

tailwind.config.js

feat: add admin dark mode and SEO/robots.txt settings

2026-02-06 23:26:01 +01:00

tsconfig.app.json

feat: overhaul public landing page and backup tooling

2025-09-19 16:39:18 +02:00

tsconfig.json

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

tsconfig.node.json

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

vite.config.ts

security: comprehensive hardening across frontend, backend, and infrastructure

2026-02-16 22:33:20 +01:00

vitest.setup.ts

Fix admin reference mode regressions

2025-10-02 23:39:17 +02:00