john/tractatus
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: Resolve all npm audit vulnerabilities (0 remaining)

Browse source 
- Upgrade bcrypt 5.x → 6.0.0 (resolves tar path traversal vulns)
- Remove deprecated csurf package (already disabled, resolves cookie vuln)
- Resolved validator, qs, jws, nodemailer, and other issues via npm audit fix

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
TheFlow 2026-02-08 21:13:22 +13:00
parent e0a7bec99e
commit 218d29e51b
2 changed files with 170 additions and 592 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

759
package-lock.json generated
View file

File diff suppressed because it is too large Load diff

3
package.json
View file

@ -43,10 +43,9 @@
"license": "Apache-2.0", "license": "Apache-2.0",
"dependencies": { "dependencies": {
"axios": "^1.12.2", "axios": "^1.12.2",
"bcrypt": "^5.1.1", "bcrypt": "^6.0.0",
"cookie-parser": "^1.4.7", "cookie-parser": "^1.4.7",
"cors": "^2.8.5", "cors": "^2.8.5",
"csurf": "^1.11.0",
"dotenv": "^16.3.1", "dotenv": "^16.3.1",
"express": "^4.18.2", "express": "^4.18.2",
"express-rate-limit": "^7.5.1", "express-rate-limit": "^7.5.1",