fix(deps): override ip-address to ^10.1.1 to patch XSS vulnerability
All checks were successful
Build, Test & Push Frontend / quality-check (pull_request) Successful in 1m6s
Build, Test & Push Frontend / docker (pull_request) Has been skipped

Resolves 4 moderate npm audit findings stemming from ip-address <=10.1.0
(GHSA-v2v4-37r5-5v8g) reaching the tree via
@angular/cli -> @modelcontextprotocol/sdk -> express-rate-limit -> ip-address.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Andreas Dahm
2026-05-06 08:07:12 +02:00
parent ffe7bbb25e
commit da44d3816e
2 changed files with 5 additions and 4 deletions

View File

@@ -44,6 +44,7 @@
"typescript-eslint": "8.58.2"
},
"overrides": {
"tmp": "^0.2.3"
"tmp": "^0.2.3",
"ip-address": "^10.1.1"
}
}