[Snyk] Fix for 5 vulnerabilities

[ekmixon]

Snyk has created this PR to fix 5 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• components/automate-ui/package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	696
	Denial of Service (DoS) SNYK-JS-WS-7266574	696
	Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	646
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	586
	Open Redirect SNYK-JS-EXPRESS-6474509	519

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled resource consumption
🦉 Open Redirect

Summary by Sourcery

Upgrade npm dependencies to address five vulnerabilities and update Angular build tools to the latest version.

Bug Fixes:

• Upgrade npm dependencies to fix vulnerabilities related to uncontrolled resource consumption, denial of service, regular expression denial of service, and open redirect.

Enhancements:

• Update @angular-devkit/build-angular and @angular/cli to version 19.0.0.

[sourcery-ai]

Reviewer's Guide by Sourcery

This PR updates Angular development dependencies to fix multiple security vulnerabilities. The changes involve upgrading @angular-devkit/build-angular and @angular/cli from version 11.x to version 19.0.0 to address five identified vulnerabilities with varying severity levels.

Class diagram for updated package.json dependencies

classDiagram
    class PackageJson {
        +dependencies
        +devDependencies
    }
    class DevDependencies {
        +@angular-devkit/build-angular: String
        +@angular/cli: String
        +@angular/compiler-cli: String
        +@angular/language-service: String
        +@types/faker: String
    }
    PackageJson --> DevDependencies
    note for DevDependencies "Updated @angular-devkit/build-angular and @angular/cli to version 19.0.0"

Loading

File-Level Changes

Change	Details	Files
Upgrade of Angular development dependencies to fix security vulnerabilities	Upgraded @angular-devkit/build-angular from 0.1102.5 to 19.0.0 Upgraded @angular/cli from 11.2.5 to 19.0.0 Addresses high severity Uncontrolled resource consumption vulnerability in braces package Addresses high severity Denial of Service vulnerability in ws package Addresses medium severity vulnerabilities in tar, glob-parent, and express packages	components/automate-ui/package.json

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time. You can also use
  this command to specify where the summary should be inserted.

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[secure-code-warrior-for-github]

Micro-Learning Topic: Regular expression denial of service (Detected by phrase)

Matched on "Regular Expression Denial of Service"

What is this? (2min video)

Denial of Service (DoS) attacks caused by Regular Expression which causes the system to hang or cause them to work very slowly when attacker sends a well-crafted input(exponentially related to input size).Denial of service attacks significantly degrade the service quality experienced by legitimate users. These attacks introduce large response delays, excessive losses, and service interruptions, resulting in direct impact on availability.

Try a challenge in Secure Code Warrior

Micro-Learning Topic: Denial of service (Detected by phrase)

Matched on "Denial of Service"

The Denial of Service (DoS) attack is focused on making a resource (site, application, server) unavailable for the purpose it was designed. There are many ways to make a service unavailable for legitimate users by manipulating network packets, programming, logical, or resources handling vulnerabilities, among others. Source: https://www.owasp.org/index.php/Denial_of_Service

Try a challenge in Secure Code Warrior

Micro-Learning Topic: Open redirect (Detected by phrase)

Matched on "Open Redirect"

What is this? (2min video)

This vulnerability refers to the ability of an attacker to arbitrarily perform a redirection (external) or forward (internal) against the system. It arises due to insufficient validation or sanitisation of inputs used to perform a redirect or forward and may result in privilege escalation (in the case of a forward) or may be used to launch phishing attacks against users (in the case of redirects).

Try a challenge in Secure Code Warrior

Helpful references

• OWASP Unvalidated Redirects and Forwards Cheat Sheet - This cheatsheet is focused on providing clear, simple, actionable guidance for preventing redirection and forwarding flaws in your applications.
• Preventing Open Redirection Attacks (C#) - A detailed Microsoft article on how to prevent open redirection vulnerabilities in ASP.NET MVC.

Micro-Learning Topic: Resource exhaustion (Detected by phrase)

Matched on "Resource Exhaustion"

What is this? (2min video)

Allocating objects or timers with user-controlled sizes or durations can cause resource exhaustion.

Try a challenge in Secure Code Warrior

[sourcery-ai]

We have skipped reviewing this pull request. Here's why:

• It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
• We don't review packaging changes - Let us know if you'd like us to change this.