cloudify-cosmo / cloudify-stage

Cloudify's New UI Framework
Apache License 2.0
40 stars 21 forks source link

NE-31913 Override express version in webpack-dev-server to not vulnerable one #2642

Closed fstaniulamartus closed 4 months ago

fstaniulamartus commented 4 months ago

Description

Updated express version in webpack-dev-server, to 4.19.2 from 4.18.2. Version 4.19.0 fixes open redirect vulnerability. See here for information about vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2024-29041.

In previous PR updating express I missed express usage in frontend, because it's just dev usage, but since there are no breaking changes here, we can update it safely. I tested locally devServer command and seems to work without issues.

Screenshots / Videos

N/A

Checklist

Tests

N/A

Documentation

N/A