[Snyk] Snyk check for week of 12/9/24

[exalate-issue-sync]

Snyk check:

Per the snyk spreadsheet (https://docs.google.com/spreadsheets/d/1SNMOyGS4JAKgXQ0RhhzoX7M2ib1vm14dD0LxWNpssP4/edit?gid=0#gid=0 ) check snyk alerts for all projects and create tickets to address ALL alerts.

Steps to create tickets for alerts:

https://github.com/fecgov/fecfile-web-api?tab=readme-ov-file#snyk-security-scanning

QA Notes

null

DEV Notes

null

Design

null

See full ticket and images here: FECFILE-1884

Pull Request: https://www.github.com/

[exalate-issue-sync]

Elaine Krauss commented: This week’s Snyk review has shown two API-side vulnerabilities, one critical and one high. Both of these are fixed by upgrading the same package, so I’ve created one new ticket to resolve them, and I’ve linked that to this ticket.

[exalate-issue-sync]

Todd Lees commented: tickets created. no code changes

[exalate-issue-sync]

Shelly Wise commented: QA review not needed for this ticket. No code changes per DEV.

Moved to Stage Ready.

[exalate-issue-sync]

Automation for Jira commented: Sprint accepted by Paul Clark during DSU on 1/15/2025 after verification of FECFILE-1770.