pagopa / mui-italia

Material-UI theme inspired by BootstrapItalia.
https://pagopa.github.io/mui-italia
MIT License
18 stars 5 forks source link

[SELC-5660] Feat: Resolve body-parser vulnerability by forcing version 1.20.3 #515

Open OraldoDoci opened 5 days ago

OraldoDoci commented 5 days ago

Short description

This PR resolves a security vulnerability in the body-parser package by enforcing version 1.20.3 in the project's dependency tree. The vulnerability could lead to a denial of service when URL encoding is enabled. The change ensures that the patched version of body-parser is used across the project, mitigating the potential risk. Its a good practice to ensure that the dependency tree remains clean and that no potentially vulnerable code exist.

https://github.com/advisories/GHSA-qwcr-r2fm-qrc7/dependabot?query=user:pagopa

Preview

List of changes proposed in this pull request

Product