From 882bc46dd60c41eb1abca1534b9572d18997228a Mon Sep 17 00:00:00 2001
From: Marcell Lanczos <dev@marcell-lanczos.com>
Date: Thu, 9 Jul 2026 11:48:21 +0200
Subject: [PATCH] fix: remediate critical CVEs

---
 package.json | 56 +++++++++++++++++++++++++++++++++++-----------------
 1 file changed, 38 insertions(+), 18 deletions(-)

diff --git a/package.json b/package.json
index fe80e03..27cf262 100644
--- a/package.json
+++ b/package.json
@@ -17,28 +17,48 @@
   },
   "homepage": "https://gitlab.com/verademo-app/verademo-api#readme",
   "devDependencies": {
-    "@types/express": "^4.17.13",
-    "@types/morgan": "^1.9.3",
-    "@types/node": "^17.0.19",
-    "@types/swagger-ui-express": "^4.1.3",
+    "@types/express": "^4.17.21",
+    "@types/morgan": "^1.9.9",
+    "@types/node": "^22.10.2",
+    "@types/swagger-ui-express": "^4.1.7",
     "blueimp-md5": "^2.19.0",
-    "concurrently": "^7.0.0",
-    "express": "^4.17.3",
+    "concurrently": "^9.1.2",
+    "express": "^4.21.2",
     "md5": "^2.3.0",
-    "morgan": "^1.10.0",
+    "morgan": "^1.10.1",
     "mysql": "^2.18.1",
-    "nodemon": "^2.0.15",
-    "swagger-jsdoc": "^6.1.0",
-    "swagger-ui-express": "^4.3.0",
-    "ts-node": "^10.5.0",
-    "tsoa": "^3.14.1",
-    "typescript": "^4.5.5",
-    "url-parse": "^1.5.3"
+    "nodemon": "^3.1.9",
+    "swagger-jsdoc": "^6.2.8",
+    "swagger-ui-express": "^5.0.1",
+    "ts-node": "^10.9.2",
+    "tsoa": "^6.6.0",
+    "typescript": "^5.7.2",
+    "url-parse": "^1.5.10"
   },
   "dependencies": {
-    "curling": "^0.3.0",
-    "djv": "^2.1.2",
-    "lodash": "^4.17.15",
-    "vm2": "^3.9.5"
+    "lodash": "^4.17.21"
+  },
+  "overrides": {
+    "ansi-regex": "^4.1.1",
+    "body-parser": "^1.20.3",
+    "brace-expansion": "^1.1.13",
+    "braces": "^3.0.3",
+    "cookie": "^0.7.0",
+    "diff": "^4.0.4",
+    "got": "^11.8.5",
+    "handlebars": "^4.7.9",
+    "http-cache-semantics": "^4.2.0",
+    "js-yaml": "^4.2.0",
+    "minimatch": "^3.1.4",
+    "minimist": "^1.2.6",
+    "on-headers": "^1.1.0",
+    "path-to-regexp": "^0.1.13",
+    "picomatch": "^2.3.2",
+    "qs": "^6.14.2",
+    "semver": "^7.5.2",
+    "send": "^0.19.0",
+    "serve-static": "^1.16.0",
+    "ts-deepmerge": "^8.0.0",
+    "validator": "^13.15.22"
   }
 }