update packages for vulnerabilities #7169
Signed-off-by: si458 <simonsmith5521@gmail.com>
si458 committed
Jul 18, 2025 at 20:50 UTC
bd670a74b4aa1ff0b88e40b03a099e1ea96ce160
4 files changed
+31
-98
dependencies.txt
+3
-3
@@ -2,8 +2,8 @@
2
"archiver": "7.0.1",
3
"body-parser": "1.20.3",
4
"cbor": "5.2.0",
5
- "compression": "1.7.5",
6
- "cookie-session": "2.1.0",
5
+ "compression": "1.8.1",
6
+ "cookie-session": "2.1.1",
7
"express": "4.21.2",
8
"express-handlebars": "7.1.3",
9
"express-ws": "5.0.2",
@@ -11,7 +11,7 @@
11
"minimist": "1.2.8",
12
"multiparty": "4.2.3",
13
"node-forge": "1.3.1",
14
- "ua-parser-js": "1.0.40",
14
"ua-client-hints-js": "0.1.2",
15
+ "ua-parser-js": "1.0.40",
16
"ws": "8.18.0",
17
"yauzl": "2.10.0"
\ No newline at end of file
meshcentral.js
+1
-1
@@ -4324,7 +4324,7 @@ function mainStart() {
4324
4325
// Build the list of required modules
4326
// NOTE: ALL MODULES MUST HAVE A VERSION NUMBER AND THE VERSION MUST MATCH THAT USED IN Dockerfile
4327
- var modules = ['archiver@7.0.1', 'body-parser@1.20.3', 'cbor@5.2.0', 'compression@1.7.5', 'cookie-session@2.1.0', 'express@4.21.2', 'express-handlebars@7.1.3', 'express-ws@5.0.2', 'ipcheck@0.1.0', 'minimist@1.2.8', 'multiparty@4.2.3', '@seald-io/nedb', 'node-forge@1.3.1', 'ua-parser-js@1.0.40', 'ua-client-hints-js@0.1.2', 'ws@8.18.0', 'yauzl@2.10.0'];
4327
+ var modules = ['archiver@7.0.1', 'body-parser@1.20.3', 'cbor@5.2.0', 'compression@1.8.1', 'cookie-session@2.1.1', 'express@4.21.2', 'express-handlebars@7.1.3', 'express-ws@5.0.2', 'ipcheck@0.1.0', 'minimist@1.2.8', 'multiparty@4.2.3', '@seald-io/nedb', 'node-forge@1.3.1', 'ua-parser-js@1.0.40', 'ua-client-hints-js@0.1.2', 'ws@8.18.0', 'yauzl@2.10.0'];
4328
if (require('os').platform() == 'win32') { modules.push('node-windows@0.1.14'); modules.push('loadavg-windows@1.1.1'); if (sspi == true) { modules.push('node-sspi@0.2.10'); } } // Add Windows modules
4329
if (ldap == true) { modules.push('ldapauth-fork@5.0.5'); }
4330
if (ssh == true) { modules.push('ssh2@1.16.0'); }
package-lock.json
+24
-91
@@ -1,20 +1,20 @@
1
{
2
"name": "meshcentral",
3
- "version": "1.1.45",
3
+ "version": "1.1.47",
4
"lockfileVersion": 3,
5
"requires": true,
6
"packages": {
7
"": {
8
"name": "meshcentral",
9
- "version": "1.1.45",
9
+ "version": "1.1.47",
10
"license": "Apache-2.0",
11
"dependencies": {
12
"@seald-io/nedb": "4.0.4",
13
"archiver": "7.0.1",
14
"body-parser": "1.20.3",
15
"cbor": "5.2.0",
16
- "compression": "1.7.5",
17
- "cookie-session": "2.1.0",
16
+ "compression": "1.8.1",
17
+ "cookie-session": "2.1.1",
18
"express": "4.21.2",
19
"express-handlebars": "7.1.3",
20
"express-ws": "5.0.2",
@@ -22,7 +22,6 @@
22
"minimist": "1.2.8",
23
"multiparty": "4.2.3",
24
"node-forge": "1.3.1",
25
- "otplib": "12.0.1",
25
"ua-client-hints-js": "0.1.2",
26
"ua-parser-js": "1.0.40",
27
"ws": "8.18.0",
@@ -52,53 +51,6 @@
51
"node": ">=12"
52
}
53
},
55
- "node_modules/@otplib/core": {
56
- "version": "12.0.1",
57
- "resolved": "https://registry.npmjs.org/@otplib/core/-/core-12.0.1.tgz",
58
- "integrity": "sha512-4sGntwbA/AC+SbPhbsziRiD+jNDdIzsZ3JUyfZwjtKyc/wufl1pnSIaG4Uqx8ymPagujub0o92kgBnB89cuAMA==",
59
- "license": "MIT"
60
- },
61
- "node_modules/@otplib/plugin-crypto": {
62
- "version": "12.0.1",
63
- "resolved": "https://registry.npmjs.org/@otplib/plugin-crypto/-/plugin-crypto-12.0.1.tgz",
64
- "integrity": "sha512-qPuhN3QrT7ZZLcLCyKOSNhuijUi9G5guMRVrxq63r9YNOxxQjPm59gVxLM+7xGnHnM6cimY57tuKsjK7y9LM1g==",
65
- "license": "MIT",
66
- "dependencies": {
67
- "@otplib/core": "^12.0.1"
68
- }
69
- },
70
- "node_modules/@otplib/plugin-thirty-two": {
71
- "version": "12.0.1",
72
- "resolved": "https://registry.npmjs.org/@otplib/plugin-thirty-two/-/plugin-thirty-two-12.0.1.tgz",
73
- "integrity": "sha512-MtT+uqRso909UkbrrYpJ6XFjj9D+x2Py7KjTO9JDPhL0bJUYVu5kFP4TFZW4NFAywrAtFRxOVY261u0qwb93gA==",
74
- "license": "MIT",
75
- "dependencies": {
76
- "@otplib/core": "^12.0.1",
77
- "thirty-two": "^1.0.2"
78
- }
79
- },
80
- "node_modules/@otplib/preset-default": {
81
- "version": "12.0.1",
82
- "resolved": "https://registry.npmjs.org/@otplib/preset-default/-/preset-default-12.0.1.tgz",
83
- "integrity": "sha512-xf1v9oOJRyXfluBhMdpOkr+bsE+Irt+0D5uHtvg6x1eosfmHCsCC6ej/m7FXiWqdo0+ZUI6xSKDhJwc8yfiOPQ==",
84
- "license": "MIT",
85
- "dependencies": {
86
- "@otplib/core": "^12.0.1",
87
- "@otplib/plugin-crypto": "^12.0.1",
88
- "@otplib/plugin-thirty-two": "^12.0.1"
89
- }
90
- },
91
- "node_modules/@otplib/preset-v11": {
92
- "version": "12.0.1",
93
- "resolved": "https://registry.npmjs.org/@otplib/preset-v11/-/preset-v11-12.0.1.tgz",
94
- "integrity": "sha512-9hSetMI7ECqbFiKICrNa4w70deTUfArtwXykPUvSHWOdzOlfa9ajglu7mNCntlvxycTiOAXkQGwjQCzzDEMRMg==",
95
- "license": "MIT",
96
- "dependencies": {
97
- "@otplib/core": "^12.0.1",
98
- "@otplib/plugin-crypto": "^12.0.1",
99
- "@otplib/plugin-thirty-two": "^12.0.1"
100
- }
101
- },
54
"node_modules/@pkgjs/parseargs": {
55
"version": "0.11.0",
56
"resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
@@ -259,9 +211,9 @@
211
"license": "MIT"
212
},
213
"node_modules/bare-events": {
262
- "version": "2.5.4",
263
- "resolved": "https://registry.npmjs.org/bare-events/-/bare-events-2.5.4.tgz",
264
- "integrity": "sha512-+gFfDkR8pj4/TrWCGUGWmJIkBwuxPS5F+a5yWjOHQt2hHvNZd5YLzadjmDUtFmMM4y429bnKLa8bYBMHcYdnQA==",
214
+ "version": "2.6.0",
215
+ "resolved": "https://registry.npmjs.org/bare-events/-/bare-events-2.6.0.tgz",
216
+ "integrity": "sha512-EKZ5BTXYExaNqi3I3f9RtEsaI/xBSGjE0XZCZilPzFAV/goswFHuPd9jEZlPIZ/iNZJwDSao9qRiScySz7MbQg==",
217
"license": "Apache-2.0",
218
"optional": true
219
},
@@ -286,9 +238,9 @@
238
"license": "MIT"
239
},
240
"node_modules/bignumber.js": {
289
- "version": "9.3.0",
290
- "resolved": "https://registry.npmjs.org/bignumber.js/-/bignumber.js-9.3.0.tgz",
291
- "integrity": "sha512-EM7aMFTXbptt/wZdMlBv2t8IViwQL+h6SLHosp8Yf0dqJMTnY6iL32opnAB6kAdL0SZPuvcAzFr31o0c/R3/RA==",
241
+ "version": "9.3.1",
242
+ "resolved": "https://registry.npmjs.org/bignumber.js/-/bignumber.js-9.3.1.tgz",
243
+ "integrity": "sha512-Ko0uX15oIUS7wJ3Rb30Fs6SkVbLmPBAKdlm7q9+ak9bbIeFf0MwuBsQV6z7+X768/cHsfg+WlysDWJcmthjsjQ==",
244
"license": "MIT",
245
"engines": {
246
"node": "*"
@@ -476,16 +428,16 @@
428
}
429
},
430
"node_modules/compression": {
479
- "version": "1.7.5",
480
- "resolved": "https://registry.npmjs.org/compression/-/compression-1.7.5.tgz",
481
- "integrity": "sha512-bQJ0YRck5ak3LgtnpKkiabX5pNF7tMUh1BSy2ZBOTh0Dim0BUu6aPPwByIns6/A5Prh8PufSPerMDUklpzes2Q==",
431
+ "version": "1.8.1",
432
+ "resolved": "https://registry.npmjs.org/compression/-/compression-1.8.1.tgz",
433
+ "integrity": "sha512-9mAqGPHLakhCLeNyxPkK4xVo746zQ/czLH1Ky+vkitMnWfWZps8r0qXuwhwizagCRttsL4lfG4pIOvaWLpAP0w==",
434
"license": "MIT",
435
"dependencies": {
436
"bytes": "3.1.2",
437
"compressible": "~2.0.18",
438
"debug": "2.6.9",
439
"negotiator": "~0.6.4",
488
- "on-headers": "~1.0.2",
440
+ "on-headers": "~1.1.0",
441
"safe-buffer": "5.2.1",
442
"vary": "~1.1.2"
443
},
@@ -524,14 +476,14 @@
476
}
477
},
478
"node_modules/cookie-session": {
527
- "version": "2.1.0",
528
- "resolved": "https://registry.npmjs.org/cookie-session/-/cookie-session-2.1.0.tgz",
529
- "integrity": "sha512-u73BDmR8QLGcs+Lprs0cfbcAPKl2HnPcjpwRXT41sEV4DRJ2+W0vJEEZkG31ofkx+HZflA70siRIjiTdIodmOQ==",
479
+ "version": "2.1.1",
480
+ "resolved": "https://registry.npmjs.org/cookie-session/-/cookie-session-2.1.1.tgz",
481
+ "integrity": "sha512-ji3kym/XZaFVew1+tIZk5ZLp9Z/fLv9rK1aZmpug0FsgE7Cu3ZDrUdRo7FT9vFjMYfNimrrUHJzywDwT7XEFlg==",
482
"license": "MIT",
483
"dependencies": {
484
"cookies": "0.9.1",
485
"debug": "3.2.7",
534
- "on-headers": "~1.0.2",
486
+ "on-headers": "~1.1.0",
487
"safe-buffer": "5.2.1"
488
},
489
"engines": {
@@ -1618,25 +1570,14 @@
1570
}
1571
},
1572
"node_modules/on-headers": {
1621
- "version": "1.0.2",
1622
- "resolved": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.2.tgz",
1623
- "integrity": "sha512-pZAE+FJLoyITytdqK0U5s+FIpjN0JP3OzFi/u8Rx+EV5/W+JTWGXG8xFzevE7AjBfDqHv/8vL8qQsIhHnqRkrA==",
1573
+ "version": "1.1.0",
1574
+ "resolved": "https://registry.npmjs.org/on-headers/-/on-headers-1.1.0.tgz",
1575
+ "integrity": "sha512-737ZY3yNnXy37FHkQxPzt4UZ2UWPWiCZWLvFZ4fu5cueciegX0zGPnrlY6bwRg4FdQOe9YU8MkmJwGhoMybl8A==",
1576
"license": "MIT",
1577
"engines": {
1578
"node": ">= 0.8"
1579
}
1580
},
1629
- "node_modules/otplib": {
1630
- "version": "12.0.1",
1631
- "resolved": "https://registry.npmjs.org/otplib/-/otplib-12.0.1.tgz",
1632
- "integrity": "sha512-xDGvUOQjop7RDgxTQ+o4pOol0/3xSZzawTiPKRrHnQWAy0WjhNs/5HdIDJCrqC4MBynmjXgULc6YfioaxZeFgg==",
1633
- "license": "MIT",
1634
- "dependencies": {
1635
- "@otplib/core": "^12.0.1",
1636
- "@otplib/preset-default": "^12.0.1",
1637
- "@otplib/preset-v11": "^12.0.1"
1638
- }
1639
- },
1581
"node_modules/package-json-from-dist": {
1582
"version": "1.0.1",
1583
"resolved": "https://registry.npmjs.org/package-json-from-dist/-/package-json-from-dist-1.0.1.tgz",
@@ -2055,9 +1996,9 @@
1996
}
1997
},
1998
"node_modules/streamx": {
2058
- "version": "2.22.0",
2059
- "resolved": "https://registry.npmjs.org/streamx/-/streamx-2.22.0.tgz",
2060
- "integrity": "sha512-sLh1evHOzBy/iWRiR6d1zRcLao4gGZr3C1kzNz4fopCOKJb6xD9ub8Mpi9Mr1R6id5o43S+d93fI48UC5uM9aw==",
1999
+ "version": "2.22.1",
2000
+ "resolved": "https://registry.npmjs.org/streamx/-/streamx-2.22.1.tgz",
2001
+ "integrity": "sha512-znKXEBxfatz2GBNK02kRnCXjV+AA4kjZIUxeWSr3UGirZMJfTE9uiwKHobnbgxWyL/JWro8tTq+vOqAK1/qbSA==",
2002
"license": "MIT",
2003
"dependencies": {
2004
"fast-fifo": "^1.3.2",
@@ -2192,14 +2133,6 @@
2133
"b4a": "^1.6.4"
2134
}
2135
},
2195
- "node_modules/thirty-two": {
2196
- "version": "1.0.2",
2197
- "resolved": "https://registry.npmjs.org/thirty-two/-/thirty-two-1.0.2.tgz",
2198
- "integrity": "sha512-OEI0IWCe+Dw46019YLl6V10Us5bi574EvlJEOcAkB29IzQ/mYD1A6RyNHLjZPiHCmuodxvgF6U+vZO1L15lxVA==",
2199
- "engines": {
2200
- "node": ">=0.2.6"
2201
- }
2202
- },
2136
"node_modules/toidentifier": {
2137
"version": "1.0.1",
2138
"resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
package.json
+3
-3
@@ -41,8 +41,8 @@
41
"archiver": "7.0.1",
42
"body-parser": "1.20.3",
43
"cbor": "5.2.0",
44
- "compression": "1.7.5",
45
- "cookie-session": "2.1.0",
44
+ "compression": "1.8.1",
45
+ "cookie-session": "2.1.1",
46
"express": "4.21.2",
47
"express-handlebars": "7.1.3",
48
"express-ws": "5.0.2",
@@ -50,8 +50,8 @@
50
"minimist": "1.2.8",
51
"multiparty": "4.2.3",
52
"node-forge": "1.3.1",
53
- "ua-parser-js": "1.0.40",
53
"ua-client-hints-js": "0.1.2",
54
+ "ua-parser-js": "1.0.40",
55
"ws": "8.18.0",
56
"yauzl": "2.10.0"
57
},