From 28d5d9cfdb4e0a66e35a7c82e9f85dd9e69839e2 Mon Sep 17 00:00:00 2001 From: aet Date: Wed, 3 Jun 2026 12:03:32 +0100 Subject: [PATCH] R11DT-3980 - Bump transitive deps axios and brace-expansion (security) Force patched versions via scoped npm overrides: - axios >=1.16.0 (GHSA-35jp-ww65-95wh, High - prototype pollution -> proxy MITM) - @swagger-api/apidom-reference > brace-expansion >=5.0.6 (GHSA-jxxr-4gwj-5jf2, Medium - ReDoS/memory) Rebuilt dist bundles. --- dist/index.html | 6 ++-- dist/swagger-ui-bundle.js | 2 +- dist/swagger-ui-es-bundle-core.js | 2 +- dist/swagger-ui-es-bundle-core.js.map | 2 +- dist/swagger-ui-es-bundle.js | 2 +- dist/swagger-ui-standalone-preset.js | 2 +- dist/swagger-ui.css | 2 +- dist/swagger-ui.css.map | 2 +- dist/swagger-ui.js | 2 +- dist/swagger-ui.js.map | 2 +- package-lock.json | 50 ++++++++++++++++++++------- package.json | 4 +++ 12 files changed, 54 insertions(+), 24 deletions(-) diff --git a/dist/index.html b/dist/index.html index ca53f7aa6a0..bcf6bc18752 100644 --- a/dist/index.html +++ b/dist/index.html @@ -4,7 +4,7 @@ Swagger UI - + @@ -49,8 +49,8 @@
- - + +