fix(deps): override ip-address to ^10.1.1 to patch XSS vulnerability #34
Reference in New Issue
Block a user
Delete Branch "fix/dependency-vulnerabilities"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Resolves 4 moderate npm audit findings stemming from ip-address <=10.1.0
(GHSA-v2v4-37r5-5v8g) reaching the tree via
@angular/cli -> @modelcontextprotocol/sdk -> express-rate-limit -> ip-address.
Co-Authored-By: Claude Opus 4.7 (1M context) noreply@anthropic.com