search

GSA / notifications-admin

The UI of Notify.gov
https://notify.gov
Other
10 stars 2 forks source link

initial #1619

Closed terrazoon closed 2 weeks ago

terrazoon commented 2 weeks ago

Description

  1. Update node from 16.15.1 to 16.20.2 (last of the 16s)
  2. Update jQuery to get it off the npm outdated list
  3. It turns out the websockets version that node uses is vulnerability. Update the package-lock.json file to force dependencies that use websockets to use the patched version of websocketsc
  4. It turns out a new urllib3 vulnerability coincidentally turned up on the python side, so fix that as well.

Security Considerations

Updating old libraries to avoid vulnerabilities.