[Snyk] Fix for 2 vulnerabilities

[OATEF4313]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	828/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.7	Denial of Service (DoS) SNYK-JS-HTTPPROXYMIDDLEWARE-8229906	No	Proof of Concept
	696/1000 Why? Recently disclosed, Has a fix available, CVSS 8.2	Uncontrolled Recursion SNYK-JS-NEXT-8186172	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: http-proxy-middleware

The new version differs by 40 commits.

• 43f3883 chore(package): v3.0.3 (Update searching-code.md github/docs#1044)
• 788b21e fix(pathFilter): handle errors (Update submitting-content-removal-requests.md github/docs#1043)
• 6fae40d chore(package): release v3.0.2 (fix: CSS class had single quote in name github/docs#1037)
• 36cd3a9 fix(logger-plugin): handle undefined protocol and hostname (typo fix in security hardening github/docs#1036)
• 45364e4 chore(eslint): lint examples (Fix broken link on liquid helpers github/docs#1033)
• c2f912a chore(package): upgrade to eslint v9 (chore: Add EditorConfig for IDE whitespace github/docs#1032)
• 51cd442 refactor(dependency): replace is-plain-obj with is-plain-object (repo sync github/docs#1031)
• 1b3817d chore(vscode): fix eslint setting (Nattaphong​ github/docs#1030)
• 06ee905 chore(package): release v3.0.1 (Updated File github/docs#1029)
• 61d1933 chore(yarn.lock): micromatch 4.0.8 (Chinese version for Github Action Quickstart have an error github/docs#1027)
• 61a4599 chore(package): update deps (repo sync github/docs#1026)
• 445b31f chore(package): update dev deps (repo sync github/docs#1025)
• 58b3d3e chore(package.json): add type: commonjs (Update setting-up-a-github-pages-site-with-jekyll.md github/docs#1024)
• 897611a chore(package): 3.0.1-beta.1 (repo sync github/docs#1022)
• 45fce2c chore(examples): update yarn.lock (repo sync github/docs#1020)
• 58ce704 chore(package): update dependencies (repo sync github/docs#1019)
• 562ae35 chore(package.json): fix repository.url (> Schönen Tag. Ich weiß, dass ich es hier in poste, github/docsaber ich muss es wirklich. Ich habe dies über das Umfrageformular und Google Mail eingereicht, es erfolgt jedoch noch keine Antwort. github/docs#1018)
• 09d05d5 fix(fix-request-body): support '+json' content-type suffix (repo sync github/docs#1015)
• c8d34f1 ci(github-actions): update to actions/cache@4 (Rename content/actions/quickstart.md/quickstart.md to content/actions… github/docs#1013)
• 1c7178d chore(package): update ip dev dependency (chore: Remove locales from docs.microsoft.com urls github/docs#1011)
• 520ffd7 refactor: fix circular dependencies (mutza974 github/docs#1010)
• 82aaf0a chore(package): bump dependencies (https://docs.github.com/en/free-pro-team@latest/articles/reviewing-proposed-changes-in-a-pull-request github/docs#1008)
• 0d21a57 docs(README): express request and response generics example (Update github-acceptable-use-policies.md github/docs#1006)
• 465dd8a docs(example): fastify example (Update index.md github/docs#1002)

See the full diff

Package name: next

The new version differs by 57 commits.

• a1c3a03 v14.2.7
• d46ab2c Fix hmr assetPrefix escaping and reuse logic from other files (#67983)
• d11cbc9 Reject next image urls in image optimizer (#68628)
• 575385e Fix bad modRequest in flight entry manifest (#68888)
• 9ecf2e8 update turbopack build manifest
• 325dc4b pages router: ensure x-middleware-cache is respected (#67734)
• d3021b6 update playwright interface
• 5e6f511 fix i18n data pathname resolving (#68947)
• dd32e0f Update font data (#68639)
• 2f7fa98 Add deployment id header for rsc payload if present (#67255)
• 545746e fix: properly patch lockfile against swc bindings (#66515)
• 26c80ee GTM dataLayer parameter should take an object, not an array of strings (#66339)
• bce2ec0 build: upgrade edge-runtime (#67565)
• 96d6ada fix(next): add cross origin in react dom preload (#67423)
• c572030 fix: Narrow down from `string | undefined` to `string` (#65248)
• b5db704 Refactor internal routing headers to use request meta (#66987)
• deeeb5f Revert "chore: externalize undici for bundling" (#65727)
• 43f24d0 Switch from automatically requesting reviews to manually requesting them (#67024)
• 42f0129 fix formatting from #69164
• 427c01d v14.2.6
• d4ca0b9 Ensure fetch cache TTL is updated properly (#69164)
• eee87cb remove invalid line in disabling webpack cache example
• dc40cc9 Fix typo in memory usage docs
• 28110b6 [docs] Backport Multi-Zones docs to 14.x branch (#68460)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)