From 550e75445576b1c47c0507cd665563a63a79f635 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 17 Apr 2026 06:39:46 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-DOMPURIFY-16078387 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index ba272cdaa90..71e18ade44c 100644 --- a/package-lock.json +++ b/package-lock.json @@ -13,7 +13,7 @@ "body-parser": "1.9.0", "cfenv": "^1.0.4", "consolidate": "0.14.5", - "dompurify": "^3.3.0", + "dompurify": "^3.4.0", "dustjs-helpers": "1.5.0", "dustjs-linkedin": "2.5.0", "ejs": "1.0.0", @@ -4211,9 +4211,9 @@ } }, "node_modules/dompurify": { - "version": "3.3.0", - "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.0.tgz", - "integrity": "sha512-r+f6MYR1gGN1eJv0TVQbhA7if/U7P87cdPl3HN5rikqaBSBxLiCb/b9O+2eG0cxz0ghyU+mU1QkbsOwERMYlWQ==", + "version": "3.4.0", + "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.0.tgz", + "integrity": "sha512-nolgK9JcaUXMSmW+j1yaSvaEaoXYHwWyGJlkoCTghc97KgGDDSnpoU/PlEnw63Ah+TGKFOyY+X5LnxaWbCSfXg==", "license": "(MPL-2.0 OR Apache-2.0)", "optionalDependencies": { "@types/trusted-types": "^2.0.7" @@ -18618,9 +18618,9 @@ "dev": true }, "dompurify": { - "version": "3.3.0", - "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.0.tgz", - "integrity": "sha512-r+f6MYR1gGN1eJv0TVQbhA7if/U7P87cdPl3HN5rikqaBSBxLiCb/b9O+2eG0cxz0ghyU+mU1QkbsOwERMYlWQ==", + "version": "3.4.0", + "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.0.tgz", + "integrity": "sha512-nolgK9JcaUXMSmW+j1yaSvaEaoXYHwWyGJlkoCTghc97KgGDDSnpoU/PlEnw63Ah+TGKFOyY+X5LnxaWbCSfXg==", "requires": { "@types/trusted-types": "^2.0.7" } diff --git a/package.json b/package.json index 03b266eb493..0b41e7e7a47 100644 --- a/package.json +++ b/package.json @@ -19,7 +19,7 @@ "body-parser": "1.9.0", "cfenv": "^1.0.4", "consolidate": "0.14.5", - "dompurify": "^3.3.0", + "dompurify": "^3.4.0", "dustjs-helpers": "1.5.0", "dustjs-linkedin": "2.5.0", "ejs": "1.0.0",