Security upgrade for express and related dependencies

[sumansaurabh]

User description

Snyk has created this PR to fix 4 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• server/package.json
• server/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	696
	Cross-site Scripting SNYK-JS-EXPRESS-7926867	541
	Cross-site Scripting SNYK-JS-SEND-7926862	391
	Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	391

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting

---

Description

• Upgraded express from 4.18.2 to 4.21.0 to address security vulnerabilities.
• Updated body-parser to 1.20.3 and other dependencies for improved security.
• This PR resolves multiple vulnerabilities identified by Snyk.

---

Changes walkthrough 📝

Relevant files

Dependencies

package.json Update express dependency in package.json                                server/package.json Updated express dependency from 4.18.2 to 4.21.0. +1/-1      package-lock.json Update package-lock.json with new dependencies                      server/package-lock.json Updated express version to 4.21.0. Updated body-parser version to 1.20.3. Various other dependency updates for security improvements. +254/-87

[penify-dev]

PR Review 🔍

⏱️ Estimated effort to review [1-5]	2, because the changes are primarily version updates in the package-lock and package.json files, which are straightforward to review.
🧪 Relevant tests	No
⚡ Possible issues	No
🔒 Security concerns	No

[penify-dev]

PR Code Suggestions ✨

Category	Suggestion	Score
Possible issue	Review compatibility of the updated dependency with existing code Consider reviewing the compatibility of the new version of express with existing code to ensure no breaking changes affect the application. server/package.json [4] -"express": "^4.21.0", +"express": "^4.21.0", // Ensure compatibility with existing code Suggestion importance[1-10]: 7 Why: The suggestion addresses a valid concern regarding potential breaking changes with the updated dependency, which is important for maintaining application stability. However, it does not propose a specific code change, which limits its impact.	7