From dd9cc9bce5586ee048af23889606c3400ff31b91 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 1 Jan 2026 11:05:03 +0000
Subject: [PATCH] fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-QS-14724253
---
 package.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/package.json b/package.json
index ae95b09f06..0d5fa45a95 100644
--- a/package.json
+++ b/package.json
@@ -41,7 +41,7 @@
     "amazon-s3-uri": "0.0.3",
     "async": "~2.5.0",
     "aws-sdk": "^2.123.0",
-    "body-parser": "^1.18.2",
+    "body-parser": "^1.20.4",
     "bower": "^1.8.2",
     "chalk": "~2.1.0",
     "compression": "^1.7.1",
@@ -50,7 +50,7 @@
     "cookie-parser": "~1.4.1",
     "del": "~3.0.0",
     "eslint-config-airbnb": "~6.0.2",
-    "express": "^4.16.0",
+    "express": "^4.22.0",
     "express-hbs": "~1.0.4",
     "express-session": "^1.15.6",
     "generate-password": "~1.3.0",
@@ -63,14 +63,14 @@
     "gulp-csso": "~3.0.0",
     "gulp-eslint": "^3.0.1",
     "gulp-imagemin": "~3.3.0",
-    "gulp-less": "^3.3.2",
+    "gulp-less": "^4.0.0",
     "gulp-load-plugins": "~1.5.0",
     "gulp-ng-annotate": "~2.0.0",
-    "gulp-nodemon": "^2.2.1",
+    "gulp-nodemon": "^2.5.0",
     "gulp-refresh": "^1.1.0",
     "gulp-rename": "~1.2.2",
     "gulp-rev": "~8.0.0",
-    "gulp-sass": "^3.1.0",
+    "gulp-sass": "^5.0.0",
     "gulp-uglify": "~3.0.0",
     "helmet": "^3.8.2",
     "imagemin-pngquant": "~5.0.0",