fix(deps): override ip-address to ^10.1.1 to patch XSS vulnerability
All checks were successful
Build, Test & Push Frontend / quality-check (pull_request) Successful in 1m6s
Build, Test & Push Frontend / docker (pull_request) Has been skipped

Resolves 4 moderate npm audit findings stemming from ip-address <=10.1.0
(GHSA-v2v4-37r5-5v8g) reaching the tree via
@angular/cli -> @modelcontextprotocol/sdk -> express-rate-limit -> ip-address.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Andreas Dahm
2026-05-06 08:07:12 +02:00
parent ffe7bbb25e
commit da44d3816e
2 changed files with 5 additions and 4 deletions

6
package-lock.json generated
View File

@@ -8667,9 +8667,9 @@
}
},
"node_modules/ip-address": {
"version": "10.1.0",
"resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz",
"integrity": "sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==",
"version": "10.2.0",
"resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz",
"integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==",
"dev": true,
"license": "MIT",
"engines": {

View File

@@ -44,6 +44,7 @@
"typescript-eslint": "8.58.2"
},
"overrides": {
"tmp": "^0.2.3"
"tmp": "^0.2.3",
"ip-address": "^10.1.1"
}
}