Skip to content

103 fix backend runtime dependency vulnerabilities #108

Jump to bottom
Merged
merged 5 commits into from
Nov 12, 2026
Merged

103 fix backend runtime dependency vulnerabilities #108

merged 5 commits into from
Nov 12, 2026
+42 −19

Conversation

krgjert
Copy link
Member

@krgjert krgjert commented Nov 12, 2026

Purpose

Fix backend denial-of-service vulnerabilities in body-parser and qs.

Changes

  • Update body-parser to 2.4.0 and qs to 6.17.1 in the backend lockfile.

Related issues

None.

Verification

  • npm audit: 0 vulnerabilities.
  • Build, lint, and GraphQL functionality: pending confirmation.
  • Dependabot alert closure: verify after merge.

Screenshots

Not applicable.

Checklist

  • I have reviewed my own changes.
  • The changes meet the linked issue's acceptance criteria, where applicable.
  • I have verified the changes and recorded the results above.
  • I have added or updated tests where needed.
  • I have updated documentation where needed.
  • I have included screenshots for visual changes, or marked them not applicable.

@krgjert krgjert added the bug Something isn't working label Nov 12, 2026
@krgjert krgjert added this to the 4. underveisinnlevering milestone Nov 12, 2026
@krgjert krgjert self-assigned this Nov 12, 2026
@krgjert krgjert requested a review from a team as a code owner November 12, 2026 17:54
@krgjert krgjert linked an issue Nov 12, 2026 that may be closed by this pull request
Fix backend runtime dependency vulnerabilities #103
Closed
4 tasks
wilhelsr
wilhelsr approved these changes Nov 12, 2026
View reviewed changes
Copy link
Member

@wilhelsr wilhelsr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved pending confirmation of build, lint, and GraphQL checks.

@wilhelsr wilhelsr changed the base branch from main to dev November 12, 2026 18:01
@wilhelsr wilhelsr merged commit e345715 into dev Nov 12, 2026
@krgjert krgjert deleted the 103-fix-backend-runtime-dependency-vulnerabilities branch November 14, 2026 09:30
Sign in to join this conversation on GitHub.
Reviewers

@wilhelsr wilhelsr wilhelsr approved these changes

Assignees

@krgjert krgjert

Labels
bug Something isn't working
Projects
None yet
Milestone
4. underveisinnlevering
Development

Successfully merging this pull request may close these issues.

Fix backend runtime dependency vulnerabilities
2 participants
@krgjert @wilhelsr