refactor: review vulnerable packages in app, strapi

openkfw · Jan 16, 2025 · 2f71df6 · 2f71df6
1 parent 4eab0fd
commit 2f71df6
Show file tree

Hide file tree

Showing 2 changed files with 657 additions and 13 deletions.
diff --git a/strapi/package.json b/strapi/package.json
@@ -41,18 +41,20 @@
   },
   "pnpm": {
     "overrides": {
-      "@koa/cors@<5.0.0": ">=5.0.0",
+      "cookie@<0.7.0": ">=0.7.0",
       "tar@<6.2.1": ">=6.2.1",
-      "braces@<3.0.3": ">=3.0.3",
       "ws@>=8.0.0 <8.17.1": ">=8.17.1",
-      "micromatch@<4.0.8": ">=4.0.8",
-      "vite@>=5.0.0 <=5.1.7": ">=5.1.8",
-      "vite@>=5.0.0 <5.1.8": ">=5.1.8",
-      "cookie@<0.7.0": ">=0.7.0"
+      "vite@>=5.0.0 <=5.1.7": ">=5.1.8"
     },
     "auditConfig": {
       "ignoreCves": [
+        "CVE-2023-49803",
+        "CVE-2024-4068",
+        "CVE-2024-31217",
+        "CVE-2024-4067",
         "CVE-2022-24434"
+
+
       ]
     }
   }