[Snyk] Fix for 4 vulnerabilities - #6

Open

CASABECI wants to merge 1 commit into

mainfrom

snyk-fix-6b13cbe13b72f573c00e944549ece908

CASABECI commented Jul 16, 2025

Owner

Snyk has created this PR to fix 4 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

package.json
package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Insecure Randomness SNYK-JS-UNDICI-8641354	185
	Regular Expression Denial of Service (ReDoS) SNYK-JS-OCTOKITREQUESTERROR-8730854	67
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BRACEEXPANSION-9789073	57
	Missing Release of Memory after Effective Lifetime SNYK-JS-UNDICI-10176064	57

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Missing Release of Memory after Effective Lifetime
🦉 Insecure Randomness

fix: package.json & package-lock.json to reduce vulnerabilities

f14277b

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-UNDICI-8641354
- https://snyk.io/vuln/SNYK-JS-OCTOKITREQUESTERROR-8730854
- https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073
- https://snyk.io/vuln/SNYK-JS-UNDICI-10176064

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment