From f6a5ddb8a0d99650aa3285629b60ede32d3a76d1 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 17 Apr 2025 08:06:34 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-HTTPPROXYMIDDLEWARE-9691387 - https://snyk.io/vuln/SNYK-JS-HTTPPROXYMIDDLEWARE-9691389 --- package.json | 2 +- yarn.lock | 13 ++++++++++++- 2 files changed, 13 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 6b3562f..28b907e 100644 --- a/package.json +++ b/package.json @@ -52,7 +52,7 @@ "date-fns": "^2.30.0", "file-saver": "^2.0.5", "font-awesome": "^4.7.0", - "http-proxy-middleware": "2.0.7", + "http-proxy-middleware": "2.0.9", "jquery": "^3.7.1", "json2csv": "^6.0.0-alpha.2", "mammoth": "^1.8.0", diff --git a/yarn.lock b/yarn.lock index 03ed35b..e66787e 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5576,7 +5576,18 @@ http-proxy-agent@^7.0.0: agent-base "^7.1.0" debug "^4.3.4" -http-proxy-middleware@2.0.7, http-proxy-middleware@^2.0.3: +http-proxy-middleware@2.0.9: + version "2.0.9" + resolved "https://registry.yarnpkg.com/http-proxy-middleware/-/http-proxy-middleware-2.0.9.tgz#e9e63d68afaa4eee3d147f39149ab84c0c2815ef" + integrity sha512-c1IyJYLYppU574+YI7R4QyX2ystMtVXZwIdzazUIPIJsHuWNd+mho2j+bKoHftndicGj9yh+xjd+l0yj7VeT1Q== + dependencies: + "@types/http-proxy" "^1.17.8" + http-proxy "^1.18.1" + is-glob "^4.0.1" + is-plain-obj "^3.0.0" + micromatch "^4.0.2" + +http-proxy-middleware@^2.0.3: version "2.0.7" resolved "https://registry.yarnpkg.com/http-proxy-middleware/-/http-proxy-middleware-2.0.7.tgz#915f236d92ae98ef48278a95dedf17e991936ec6" integrity sha512-fgVY8AV7qU7z/MmXJ/rxwbrtQH4jBQ9m7kp3llF0liB7glmFeVZFBepQb32T3y8n8k2+AEYuMPCpinYW+/CuRA==