From f84cdd3734e03e56a343e99d54273563cfae3423 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 27 Jul 2026 11:50:54 +0000 Subject: [PATCH 1/2] fix: user-frontend/package.json & user-frontend/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-15965856 - https://snyk.io/vuln/SNYK-JS-AXIOS-15969258 --- user-frontend/package-lock.json | 20 ++++++++++++-------- user-frontend/package.json | 2 +- 2 files changed, 13 insertions(+), 9 deletions(-) diff --git a/user-frontend/package-lock.json b/user-frontend/package-lock.json index d9d9c914..d1c819d5 100644 --- a/user-frontend/package-lock.json +++ b/user-frontend/package-lock.json @@ -15,7 +15,7 @@ "@testing-library/jest-dom": "^5.17.0", "@testing-library/react": "^13.4.0", "@testing-library/user-event": "^13.5.0", - "axios": "^1.13.5", + "axios": "^1.15.0", "react": "^18.3.1", "react-dom": "^18.3.1", "react-scripts": "^5.0.1", @@ -6239,14 +6239,14 @@ } }, "node_modules/axios": { - "version": "1.13.5", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.5.tgz", - "integrity": "sha512-cz4ur7Vb0xS4/KUN0tPWe44eqxrIu31me+fbang3ijiNscE129POzipJJA6zniq2C/Z6sJCjMimjS8Lc/GAs8Q==", + "version": "1.15.0", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.15.0.tgz", + "integrity": "sha512-wWyJDlAatxk30ZJer+GeCWS209sA42X+N5jU2jy6oHTp7ufw8uzUTVFBX9+wTfAlhiJXGS0Bq7X6efruWjuK9Q==", "license": "MIT", "dependencies": { "follow-redirects": "^1.15.11", "form-data": "^4.0.5", - "proxy-from-env": "^1.1.0" + "proxy-from-env": "^2.1.0" } }, "node_modules/axobject-query": { @@ -16976,9 +16976,13 @@ } }, "node_modules/proxy-from-env": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz", - "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==" + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-2.1.0.tgz", + "integrity": "sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==", + "license": "MIT", + "engines": { + "node": ">=10" + } }, "node_modules/psl": { "version": "1.9.0", diff --git a/user-frontend/package.json b/user-frontend/package.json index 206a0b6a..d8221977 100644 --- a/user-frontend/package.json +++ b/user-frontend/package.json @@ -11,7 +11,7 @@ "@testing-library/react": "^13.4.0", "@testing-library/user-event": "^13.5.0", "@babel/plugin-proposal-private-property-in-object": "^7.12.1", - "axios": "^1.13.5", + "axios": "^1.15.0", "react": "^18.3.1", "react-dom": "^18.3.1", "react-scripts": "^5.0.1", From 74b9bcde37a2163ab496f56e2434be071550ee01 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 27 Jul 2026 11:51:21 +0000 Subject: [PATCH 2/2] fix: user-frontend/package.json & user-frontend/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-15965856 - https://snyk.io/vuln/SNYK-JS-AXIOS-15969258