[Snyk] Fix for 2 vulnerabilities

[aam-digital-ci]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	601/1000 Why? Recently disclosed, Has a fix available, CVSS 6.3	Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	No	No Known Exploit
	828/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.7	Denial of Service (DoS) SNYK-JS-HTTPPROXYMIDDLEWARE-8229906	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @nestjs/platform-express

The new version differs by 250 commits.

• ed644e9 chore(@ nestjs) publish v10.4.5 release
• 0ea48d2 Merge pull request #13879 from frndvrgs/feat-opts-listen-method
• 508d2f3 Merge pull request #14060 from ezintz/fix-express-vulnerabilities
• 7cf4708 Merge pull request #13903 from nestjs/dependabot/npm_and_yarn/sample/31-graphql-federation-code-first/posts-application/multi-dabac980bd
• 8c2e03d Merge pull request #13917 from nestjs/dependabot/npm_and_yarn/sample/32-graphql-federation-schema-first/posts-application/micromatch-4.0.8
• 6ada824 Merge pull request #14064 from PattyTrish/cookie-vulnerability-update
• d2ca9ec Merge pull request #14066 from micalevisk/test/cover-validation-pipe-options
• 78b3f0c test(common): add tests for validation pipe on 'custom' types
• 980eb5b build(fastify): upgrade light-my-request to 6.1.0
• 160c3b3 build(express): upgrade to express 4.2.1
• d0f401a Merge pull request #14015 from nestjs/dependabot/npm_and_yarn/sample/10-fastify/find-my-way-8.2.2
• 89840ce Merge pull request #14039 from nestjs/dependabot/npm_and_yarn/sample/23-graphql-code-first/multi-1f9ae28231
• 9423743 Merge pull request #14040 from nestjs/dependabot/npm_and_yarn/sample/24-serve-static/multi-0b8bbc7c9e
• 9ee0224 Update Readme.md
• 93514fd chore(deps): bump send, @ nestjs/platform-express and express
• a46a7db chore(deps): bump serve-static, express and @ nestjs/platform-express
• 9825529 Merge pull request #14034 from nestjs/dependabot/npm_and_yarn/sample/28-sse/multi-5eb378ec3a
• 826ff4b Merge pull request #14035 from nestjs/dependabot/npm_and_yarn/sample/28-sse/multi-6ddc2c7951
• fd740b6 chore(deps): bump send and @ nestjs/platform-express in /sample/28-sse
• c936dec chore(deps): bump serve-static and @ nestjs/platform-express
• 47cda92 Merge pull request #14030 from nestjs/dependabot/npm_and_yarn/sample/25-dynamic-modules/multi-6ddc2c7951
• d70d0ba Merge pull request #14031 from nestjs/dependabot/npm_and_yarn/sample/25-dynamic-modules/multi-5eb378ec3a
• 0fbc2a6 chore(deps): bump serve-static and @ nestjs/platform-express
• fa56e58 chore(deps): bump send and @ nestjs/platform-express

See the full diff

Package name: http-proxy-middleware

The new version differs by 40 commits.

• 43f3883 chore(package): v3.0.3 (#1044)
• 788b21e fix(pathFilter): handle errors (#1043)
• 6fae40d chore(package): release v3.0.2 (#1037)
• 36cd3a9 fix(logger-plugin): handle undefined protocol and hostname (#1036)
• 45364e4 chore(eslint): lint examples (#1033)
• c2f912a chore(package): upgrade to eslint v9 (#1032)
• 51cd442 refactor(dependency): replace is-plain-obj with is-plain-object (#1031)
• 1b3817d chore(vscode): fix eslint setting (#1030)
• 06ee905 chore(package): release v3.0.1 (#1029)
• 61d1933 chore(yarn.lock): micromatch 4.0.8 (#1027)
• 61a4599 chore(package): update deps (#1026)
• 445b31f chore(package): update dev deps (#1025)
• 58b3d3e chore(package.json): add type: commonjs (#1024)
• 897611a chore(package): 3.0.1-beta.1 (#1022)
• 45fce2c chore(examples): update yarn.lock (#1020)
• 58ce704 chore(package): update dependencies (#1019)
• 562ae35 chore(package.json): fix repository.url (#1018)
• 09d05d5 fix(fix-request-body): support '+json' content-type suffix (#1015)
• c8d34f1 ci(github-actions): update to actions/cache@4 (#1013)
• 1c7178d chore(package): update ip dev dependency (#1011)
• 520ffd7 refactor: fix circular dependencies (#1010)
• 82aaf0a chore(package): bump dependencies (#1008)
• 0d21a57 docs(README): express request and response generics example (#1006)
• 465dd8a docs(example): fastify example (#1002)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)
🦉 Denial of Service (DoS)