minor v1.8.0 #27

Merged

jkeffects merged 9 commits from develop into main

2026-08-10 13:14:11 +00:00

jkeffects commented

2026-08-10 10:24:35 +00:00

Owner

update packages and cve close
Merge pull request 'feature/#19-maps-with-indicators-and-infos' (#26) from feature/#19-maps-with-indicators-and-infos into develop gestern
fix: notification send on no website sync

update packages and cve close Merge pull request 'feature/#19-maps-with-indicators-and-infos' (#26) from feature/#19-maps-with-indicators-and-infos into develop gestern fix: notification send on no website sync

jkeffects self-assigned this

2026-08-10 10:24:35 +00:00

jkeffects added 8 commits

2026-08-10 10:24:35 +00:00

fix: notification send on no website sync 5a5bd6e1d1

entity and migration 03f97e5919

commands and services 9a729caf14

controller, factory and routes 3282fdc182

store icon name optional 25b292ce84

fix types d5dd82b73e

Merge pull request 'feature/#19-maps-with-indicators-and-infos' (#26 ) from feature/#19-maps-with-indicators-and-infos into develop c08ee1c9f0

Reviewed-on: #26

update packages and cve close cb1b4fef40

axios  1.0.0 - 1.17.0
Severity: high
Axios: Excessive recursion in formDataToJSON can cause denial of service - https://github.com/advisories/GHSA-42h9-826w-cgv3
Axios: Deep formToJSON Key Recursion Can Cause Denial of Service - https://github.com/advisories/GHSA-pmv8-rq9r-6j72
Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength` - https://github.com/advisories/GHSA-jqh4-m9w3-8hp9
Axios: Prototype pollution gadgets can alter axios request construction - https://github.com/advisories/GHSA-mmx7-hfxf-jppx
Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios - https://github.com/advisories/GHSA-f4gw-2p7v-4548
Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning - https://github.com/advisories/GHSA-gcfj-64vw-6mp9
Axios form serializer maxDepth bypass via {} metatoken - https://github.com/advisories/GHSA-hcpx-6fm6-wx23
Axios: Nested axios option objects can consume polluted prototype values - https://github.com/advisories/GHSA-7q8q-rj6j-mhjq
Axios: HTTP/2 streamed uploads bypass `maxBodyLength` - https://github.com/advisories/GHSA-mwf2-3pr3-8698
Axios: Prototype pollution auth subfields can inject Basic auth - https://github.com/advisories/GHSA-xj6q-8x83-jv6g

body-parser  2.0.0 - 2.2.2
body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement - https://github.com/advisories/GHSA-v422-hmwv-36x6

socket.io-parser  4.0.0 - 4.2.6
Severity: high
Socket.IO: Zero-attachment Memory Exhaustion - https://github.com/advisories/GHSA-2m8v-j782-fhvr