From c086df287d82279f099f022b9b3465be928d8af2 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 27 Nov 2024 00:29:30 +0000
Subject: [PATCH] fix: server/package.json & server/package-lock.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AXIOS-6671926
---
 server/package-lock.json | 27 ++++++++++++++++++---------
 server/package.json      |  2 +-
 2 files changed, 19 insertions(+), 10 deletions(-)

diff --git a/server/package-lock.json b/server/package-lock.json
index 8f81b3f..4a29681 100644
--- a/server/package-lock.json
+++ b/server/package-lock.json
@@ -11,7 +11,7 @@
             "dependencies": {
                 "@fastify/auth": "3.0.2",
                 "async-mqtt": "2.6.3",
-                "axios": "0.27.2",
+                "axios": "^1.7.8",
                 "dotenv": "14.3.2",
                 "fast-csv": "4.3.6",
                 "fastify": "4.14.1",
@@ -316,12 +316,14 @@
             }
         },
         "node_modules/axios": {
-            "version": "0.27.2",
-            "resolved": "https://registry.npmjs.org/axios/-/axios-0.27.2.tgz",
-            "integrity": "sha512-t+yRIyySRTp/wua5xEr+z1q60QmLq8ABsS5O9Me1AsE5dfKqgnCFzwiCZZ/cGNd1lq4/7akDWMxdhVlucjmnOQ==",
+            "version": "1.7.8",
+            "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.8.tgz",
+            "integrity": "sha512-Uu0wb7KNqK2t5K+YQyVCLM76prD5sRFjKHbJYCP1J7JFGEQ6nN7HWn9+04LAeiJ3ji54lgS/gZCH1oxyrf1SPw==",
+            "license": "MIT",
             "dependencies": {
-                "follow-redirects": "^1.14.9",
-                "form-data": "^4.0.0"
+                "follow-redirects": "^1.15.6",
+                "form-data": "^4.0.0",
+                "proxy-from-env": "^1.1.0"
             }
         },
         "node_modules/balanced-match": {
@@ -746,15 +748,16 @@
             }
         },
         "node_modules/follow-redirects": {
-            "version": "1.15.2",
-            "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.2.tgz",
-            "integrity": "sha512-VQLG33o04KaQ8uYi2tVNbdrWp1QWxNNea+nmIB4EVM28v0hmP17z7aG1+wAkNzVq4KeXTq3221ye5qTJP91JwA==",
+            "version": "1.15.9",
+            "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.9.tgz",
+            "integrity": "sha512-gew4GsXizNgdoRyqmyfMHyAmXsZDk6mHkSxZFCzW9gwlbtOW44CDtYavM+y+72qD/Vq2l550kMF52DT8fOLJqQ==",
             "funding": [
                 {
                     "type": "individual",
                     "url": "https://github.com/sponsors/RubenVerborgh"
                 }
             ],
+            "license": "MIT",
             "engines": {
                 "node": ">=4.0"
             },
@@ -1296,6 +1299,12 @@
                 "node": ">= 0.10"
             }
         },
+        "node_modules/proxy-from-env": {
+            "version": "1.1.0",
+            "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz",
+            "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==",
+            "license": "MIT"
+        },
         "node_modules/pump": {
             "version": "3.0.0",
             "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz",
diff --git a/server/package.json b/server/package.json
index 9f47885..e82f477 100644
--- a/server/package.json
+++ b/server/package.json
@@ -29,7 +29,7 @@
     "dependencies": {
         "@fastify/auth": "3.0.2",
         "async-mqtt": "2.6.3",
-        "axios": "0.27.2",
+        "axios": "1.7.8",
         "dotenv": "14.3.2",
         "fast-csv": "4.3.6",
         "fastify": "4.14.1",