Closed rolandsusans closed 1 week ago
Yep, please merge this @scottie1984. There's 3 high security vulnerabilities with the express-dependency.
body-parser <1.20.3
Severity: high
body-parser vulnerable to denial of service when url encoding is enabled - https://github.com/advisories/GHSA-qwcr-r2fm-qrc7
body-parser@1.20.2
node_modules/body-parser
body-parser@"1.20.2" from express@4.19.2
node_modules/express
express@"^4.19.2" from the root project
peer express@">=4.0.0 || >=5.0.0-beta" from swagger-ui-express@5.0.0
node_modules/swagger-ui-express
swagger-ui-express@"^5.0.0" from the root project
@scottie1984 could you push it to npm too? thanks!
chore(dev-dependency): update express
This pull request updates the
express
dependency in thepackage.json
file to ensure compatibility with the latest features and security patches.Dependency updates:
package.json
: Updatedexpress
from version^4.19.2
to^4.21.0
.