From da44d3816e577f4aeb7b7e336cfea1076ffcc0e8 Mon Sep 17 00:00:00 2001 From: Andreas Dahm Date: Wed, 6 May 2026 08:07:12 +0200 Subject: [PATCH] fix(deps): override ip-address to ^10.1.1 to patch XSS vulnerability Resolves 4 moderate npm audit findings stemming from ip-address <=10.1.0 (GHSA-v2v4-37r5-5v8g) reaching the tree via @angular/cli -> @modelcontextprotocol/sdk -> express-rate-limit -> ip-address. Co-Authored-By: Claude Opus 4.7 (1M context) --- package-lock.json | 6 +++--- package.json | 3 ++- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index 75ea63c..8ac5aea 100644 --- a/package-lock.json +++ b/package-lock.json @@ -8667,9 +8667,9 @@ } }, "node_modules/ip-address": { - "version": "10.1.0", - "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz", - "integrity": "sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==", + "version": "10.2.0", + "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz", + "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==", "dev": true, "license": "MIT", "engines": { diff --git a/package.json b/package.json index 7aa8169..7dbcb25 100644 --- a/package.json +++ b/package.json @@ -44,6 +44,7 @@ "typescript-eslint": "8.58.2" }, "overrides": { - "tmp": "^0.2.3" + "tmp": "^0.2.3", + "ip-address": "^10.1.1" } }