sonarly-bot
475ffba2d7
https://sonarly.com/issue/41619?type=bug Multiple runtime packages still resolve axios to vulnerable versions, leaving outbound HTTP paths exposed to recently disclosed high-severity axios CVEs. The issue is not a crash; it is a current security exposure in shipped dependency versions. Fix: Upgraded direct axios dependency declarations to the patched range (^1.16.1) in every affected runtime package identified by the RCA: - `packages/twenty-server/package.json` from `^1.13.5` → `^1.16.1` - `packages/twenty-sdk/package.json` from `^1.13.5` → `^1.16.1` - `packages/twenty-companion/package.json` from `^1.9.0` → `^1.16.1` - `packages/twenty-website/package.json` from `^1.14.0` → `^1.16.1` This removes the vulnerable declared version windows and aligns affected packages on the requested patched baseline. Authored by Sonarly by autonomous analysis (run 47476).
62 lines
2.0 KiB
JSON
62 lines
2.0 KiB
JSON
{
|
|
"name": "twenty-website",
|
|
"private": true,
|
|
"scripts": {
|
|
"nx": "NX_DEFAULT_PROJECT=twenty-website node ../../node_modules/nx/bin/nx.js",
|
|
"generate:releases": "node ./scripts/generate-release-notes-manifest.mjs",
|
|
"dev": "npx next dev --port 3002",
|
|
"build": "npx next build",
|
|
"start": "npx next start --port 3002",
|
|
"convert-images": "node ./scripts/convert-png-to-webp.mjs",
|
|
"preview": "opennextjs-cloudflare build && opennextjs-cloudflare preview",
|
|
"deploy:dev": "opennextjs-cloudflare build && opennextjs-cloudflare deploy --env dev",
|
|
"deploy:prod": "opennextjs-cloudflare build && opennextjs-cloudflare deploy --env prod",
|
|
"cf-typegen": "wrangler types --env-interface CloudflareEnv cloudflare-env.d.ts"
|
|
},
|
|
"dependencies": {
|
|
"@base-ui/react": "^1.3.0",
|
|
"@base-ui/utils": "^0.2.6",
|
|
"@calcom/embed-react": "^1.5.3",
|
|
"@linaria/core": "^7.0.0",
|
|
"@linaria/react": "^7.0.1",
|
|
"@lingui/core": "^5.1.2",
|
|
"@lingui/react": "^5.1.2",
|
|
"@lottiefiles/dotlottie-react": "^0.18.10",
|
|
"@tabler/icons-react": "^3.41.1",
|
|
"@wyw-in-js/babel-preset": "^0.8.1",
|
|
"axios": "^1.16.1",
|
|
"framer-motion": "^11.18.0",
|
|
"gray-matter": "^4.0.3",
|
|
"next": "16.1.7",
|
|
"next-with-linaria": "^1.3.0",
|
|
"react": "19.2.3",
|
|
"react-dom": "19.2.3",
|
|
"react-markdown": "^10.1.0",
|
|
"remark-gfm": "^4.0.1",
|
|
"sharp": "^0.33.5",
|
|
"stripe": "^20.3.1",
|
|
"three": "^0.183.2",
|
|
"twenty-shared": "workspace:*",
|
|
"zod": "^4.1.11"
|
|
},
|
|
"devDependencies": {
|
|
"@lingui/cli": "^5.1.2",
|
|
"@lingui/conf": "5.1.2",
|
|
"@lingui/format-po": "5.1.2",
|
|
"@lingui/swc-plugin": "^5.11.0",
|
|
"@opennextjs/cloudflare": "^1.0.0",
|
|
"@swc/core": "^1.15.11",
|
|
"@swc/jest": "^0.2.39",
|
|
"@types/jest": "^30.0.0",
|
|
"@types/node": "^20",
|
|
"@types/react": "^19",
|
|
"@types/react-dom": "^19",
|
|
"@types/three": "^0.183.1",
|
|
"babel-plugin-react-compiler": "1.0.0",
|
|
"jest": "29.7.0",
|
|
"jest-environment-node": "^29.4.1",
|
|
"ts-jest": "^29.1.1",
|
|
"wrangler": "^4.0.0"
|
|
}
|
|
}
|