Migrate from xlsx to exceljs to fix security vulnerabilities
- Replace xlsx package (v0.18.5) with exceljs (v4.4.0) - Remove @types/xlsx dependency (exceljs has built-in TypeScript types) - Update biaMatchingService.ts to use ExcelJS API: - Replace XLSX.read() with workbook.xlsx.load() - Replace XLSX.utils.sheet_to_json() with eachRow() iteration - Handle 1-based column indexing correctly - Make loadBIAData() and findBIAMatch() async functions - Update all callers in applications.ts and claude.ts to use await - Fix npm audit: 0 vulnerabilities (was 1 high severity) This migration eliminates the Prototype Pollution and ReDoS vulnerabilities in the xlsx package while maintaining full functionality.
This commit is contained in:
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"name": "zira-backend",
|
||||
"name": "cmdb-insight-backend",
|
||||
"version": "1.0.0",
|
||||
"description": "ZiRA Classificatie Tool Backend",
|
||||
"description": "CMDB Insight Backend",
|
||||
"type": "module",
|
||||
"main": "dist/index.js",
|
||||
"scripts": {
|
||||
@@ -29,7 +29,7 @@
|
||||
"openai": "^6.15.0",
|
||||
"pg": "^8.13.1",
|
||||
"winston": "^3.17.0",
|
||||
"xlsx": "^0.18.5"
|
||||
"exceljs": "^4.4.0"
|
||||
},
|
||||
"devDependencies": {
|
||||
"@types/better-sqlite3": "^7.6.12",
|
||||
@@ -38,7 +38,6 @@
|
||||
"@types/express": "^5.0.0",
|
||||
"@types/node": "^22.9.0",
|
||||
"@types/pg": "^8.11.10",
|
||||
"@types/xlsx": "^0.0.35",
|
||||
"tsx": "^4.19.2",
|
||||
"typescript": "^5.6.3"
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user