[Snyk] Security upgrade express from 4.18.2 to 4.21.2

[schalla0791]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-8482416	721

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[dryrunsecurity]

DryRun Security Summary

The pull request updates the express and body-parser dependencies to newer versions in package.json and package-lock.json, potentially improving the application's security and performance.

Expand for full summary

Summary:

The code changes in this pull request are focused on updating the dependencies in the package.json and package-lock.json files. The primary changes are:

1. The express dependency has been updated from version 4.18.2 to 4.21.2, which is a positive change from a security perspective as it likely includes security fixes and improvements.
2. The body-parser dependency has been updated from version 1.20.1 to 1.20.3, which is also a minor version update that likely includes bug fixes and improvements.

While these updates are generally positive for the application's security, it's important to review the release notes for the new versions of the dependencies to understand what has changed, especially any security-related fixes or improvements. Additionally, it's recommended to thoroughly test the application after the dependency updates to ensure that no regressions or unintended behavior have been introduced.

Files Changed:

• package.json: The express dependency has been updated from version 4.18.2 to 4.21.2.
• package-lock.json: The express dependency has been updated from version 4.18.2 to 4.21.2, and the body-parser dependency has been updated from version 1.20.1 to 1.20.3. Additionally, there are changes to several other dependencies, such as call-bind, content-type, cookie, encodeurl, es-define-property, es-errors, finalhandler, function-bind, get-intrinsic, and merge-descriptors, which may also have security implications that should be reviewed.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	2 findings

View PR in the DryRun Dashboard.