Compare commits

...

2 Commits

Author SHA1 Message Date
b47bce16b5 Merge pull request 'fix(deps): override ip-address to ^10.1.1 to patch XSS vulnerability' (#34) from fix/dependency-vulnerabilities into main
All checks were successful
Build, Test & Push Frontend / quality-check (push) Successful in 59s
Build, Test & Push Frontend / docker (push) Successful in 44s
Reviewed-on: #34
2026-05-06 08:07:43 +02:00
Andreas Dahm
da44d3816e fix(deps): override ip-address to ^10.1.1 to patch XSS vulnerability
All checks were successful
Build, Test & Push Frontend / quality-check (pull_request) Successful in 1m6s
Build, Test & Push Frontend / docker (pull_request) Has been skipped
Resolves 4 moderate npm audit findings stemming from ip-address <=10.1.0
(GHSA-v2v4-37r5-5v8g) reaching the tree via
@angular/cli -> @modelcontextprotocol/sdk -> express-rate-limit -> ip-address.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-06 08:07:12 +02:00
2 changed files with 5 additions and 4 deletions

6
package-lock.json generated
View File

@@ -8667,9 +8667,9 @@
} }
}, },
"node_modules/ip-address": { "node_modules/ip-address": {
"version": "10.1.0", "version": "10.2.0",
"resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz", "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz",
"integrity": "sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==", "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==",
"dev": true, "dev": true,
"license": "MIT", "license": "MIT",
"engines": { "engines": {

View File

@@ -44,6 +44,7 @@
"typescript-eslint": "8.58.2" "typescript-eslint": "8.58.2"
}, },
"overrides": { "overrides": {
"tmp": "^0.2.3" "tmp": "^0.2.3",
"ip-address": "^10.1.1"
} }
} }