Skip to content

Security: update react-admin-dashboard lockfiles (12 Dependabot alerts) #13

Description

@canuto

Dependabot reports 12 open alerts in the react-admin-dashboard template across its frontend and backend lockfiles.

Affected manifests

  • react-admin-dashboard/frontend/package-lock.json — 8 alerts
  • react-admin-dashboard/backend/package-lock.json — 4 alerts

Notable packages

Frontend (build chain): vite (high), rollup (high), esbuild, postcss, react-router, @babel/core.
Backend: fast-uri (high — patched 3.1.1/3.1.2, typically pulled via Fastify/ajv), lodash (high — patched 4.18.0).

Proposed fix

cd react-admin-dashboard/frontend && npm audit fix && npm update
cd ../backend && npm audit fix && npm update

Commit both regenerated package-lock.json files. The fast-uri fix usually rides along with a Fastify/ajv bump — verify the backend still builds/starts after.

Priority

Medium.

Metadata

Metadata

Assignees

No one assigned

    Labels

    dependenciesDependency updatessecuritySecurity vulnerability / advisory

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions