Upgrade Vulnerable Dependencies for Security Enhancements This commit updates our project dependencies to address several critical and medium-severity security vulnerabilities: - **Regular Expression Denial of Service (ReDoS) in `trim` (CVE-2020-7753)**: Upgraded to `trim@0.0.3` to mitigate a vulnerability allowing attackers to cause application outages. More details at [CVE-2020-7753](https://nvd.nist.gov/vuln/detail/CVE-2020-7753). - **Cross-Site Request Forgery (CSRF) in `axios` (CVE-2023-45857)**: Resolved by updating to `axios@1.6.0`, addressing the CSRF vulnerability that could lead to unauthorized actions. Further information is available at [CVE-2023-45857](https://nvd.nist.gov/vuln/detail/CVE-2023-45857). - **Prototype Pollution in `axios`**: Fixed by upgrading to `axios@1.6.4`, preventing malicious inputs from altering object prototypes and ensuring data integrity. - **Regular Expression Denial of Service (ReDoS) in `axios`**: Addressed by updating to `axios@1.6.3`, safeguarding the application against denial of service attacks through specially crafted strings. ### Adjustments: - Modified `package.json` and `yarn.lock` files to upgrade vulnerable dependencies to secure versions. ### Note for Yarn [zero-installs](https://yarnpkg.com/features/zero-installs) Users: This update does not directly modify the `.yarn/cache/` directory. Users leveraging Yarn's zero-installs feature are advised to run `yarn` to refresh the cache and ensure compatibility with these security updates. For those not using zero-installs, project workflows remain unaffected. By proactively addressing these vulnerabilities, we enhance our application's security and resilience against potential threats.

Commits

Commits on Feb 6, 2024

Update Discord URL

Fix for 6 Security vulnerabilities .

Merge branch 'dev' into dev

Update markdown & patch vulnerabilities

Update Dependancies fix CVE's