update express into 4.21.1

npm audit report body-parser <1.20.3 Severity: high body-parser vulnerable to denial of service when url encoding is enabled - GHSA-qwcr-r2fm-qrc7 fix available via `npm audit fix --force` Will install [email protected], which is outside the stated dependency range node_modules/body-parser express <=4.21.0 || 5.0.0-alpha.1 - 5.0.0 Depends on vulnerable versions of body-parser Depends on vulnerable versions of cookie Depends on vulnerable versions of path-to-regexp Depends on vulnerable versions of send Depends on vulnerable versions of serve-static node_modules/express cookie <0.7.0 cookie accepts cookie name, path, and domain with out of bounds characters - GHSA-pxg6-pf52-xh8x fix available via `npm audit fix --force` Will install [email protected], which is outside the stated dependency range node_modules/cookie path-to-regexp <0.1.10 Severity: high path-to-regexp outputs backtracking regular expressions - GHSA-9wv6-86v2-598j fix available via `npm audit fix --force` Will install [email protected], which is outside the stated dependency range node_modules/path-to-regexp send <0.19.0 Severity: moderate send vulnerable to template injection that can lead to XSS - GHSA-m6fv-jmcg-4jfg fix available via `npm audit fix --force` Will install [email protected], which is outside the stated dependency range node_modules/send serve-static <=1.16.0 Depends on vulnerable versions of send node_modules/serve-static 6 vulnerabilities (1 low, 2 moderate, 3 high)
line · Oct 11, 2024 · c2b557a · c2b557a
1 parent 0d0ddcb
commit c2b557a
Show file tree

Hide file tree

Showing 3 changed files with 61 additions and 77 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/packages/headless-inspector/package.json b/packages/headless-inspector/package.json
@@ -16,7 +16,7 @@
   "dependencies": {
     "@line/headless-inspector-cdp": "1.0.2",
     "@line/headless-inspector-core": "1.0.2",
-    "express": "4.19.2",
+    "express": "4.21.1",
     "selfsigned": "2.0.1",
     "ws": "8.18.0",
     "yargs": "17.4.1"

diff --git a/packages/liff-inspector/package.json b/packages/liff-inspector/package.json
@@ -16,7 +16,7 @@
   "dependencies": {
     "@line/headless-inspector": "1.0.2",
     "@line/headless-inspector-cdp": "1.0.2",
-    "express": "4.19.2",
+    "express": "4.21.1",
     "ts-loader": "9.5.1",
     "webpack": "5.94.0",
     "webpack-cli": "5.1.4",