From c3775207ab527b04ebea8eef79f761268d2f7651 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Sat, 1 Nov 2025 09:19:21 +0000
Subject: [PATCH] fix: server/package.json & server/package-lock.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-TYPEORM-13746469
---
 server/package-lock.json | 18 +++++++-----------
 server/package.json      |  2 +-
 2 files changed, 8 insertions(+), 12 deletions(-)

diff --git a/server/package-lock.json b/server/package-lock.json
index a316dcf..4b31484 100644
--- a/server/package-lock.json
+++ b/server/package-lock.json
@@ -22,7 +22,7 @@
         "langsmith": "^0.3.30",
         "reflect-metadata": "^0.2.2",
         "sqlite3": "^5.1.7",
-        "typeorm": "^0.3.20",
+        "typeorm": "^0.3.26",
         "winston": "^3.11.0",
         "zod": "^3.22.4"
       },
@@ -10291,9 +10291,9 @@
       }
     },
     "node_modules/typeorm": {
-      "version": "0.3.24",
-      "resolved": "https://registry.npmjs.org/typeorm/-/typeorm-0.3.24.tgz",
-      "integrity": "sha512-4IrHG7A0tY8l5gEGXfW56VOMfUVWEkWlH/h5wmcyZ+V8oCiLj7iTPp0lEjMEZVrxEkGSdP9ErgTKHKXQApl/oA==",
+      "version": "0.3.26",
+      "resolved": "https://registry.npmjs.org/typeorm/-/typeorm-0.3.26.tgz",
+      "integrity": "sha512-o2RrBNn3lczx1qv4j+JliVMmtkPSqEGpG0UuZkt9tCfWkoXKu8MZnjvp2GjWPll1SehwemQw6xrbVRhmOglj8Q==",
       "license": "MIT",
       "dependencies": {
         "@sqltools/formatter": "^1.2.5",
@@ -10324,9 +10324,8 @@
       },
       "peerDependencies": {
         "@google-cloud/spanner": "^5.18.0 || ^6.0.0 || ^7.0.0",
-        "@sap/hana-client": "^2.12.25",
-        "better-sqlite3": "^8.0.0 || ^9.0.0 || ^10.0.0 || ^11.0.0",
-        "hdb-pool": "^0.1.6",
+        "@sap/hana-client": "^2.14.22",
+        "better-sqlite3": "^8.0.0 || ^9.0.0 || ^10.0.0 || ^11.0.0 || ^12.0.0",
         "ioredis": "^5.0.4",
         "mongodb": "^5.8.0 || ^6.0.0",
         "mssql": "^9.1.1 || ^10.0.1 || ^11.0.1",
@@ -10335,7 +10334,7 @@
         "pg": "^8.5.1",
         "pg-native": "^3.0.0",
         "pg-query-stream": "^4.0.0",
-        "redis": "^3.1.1 || ^4.0.0",
+        "redis": "^3.1.1 || ^4.0.0 || ^5.0.14",
         "reflect-metadata": "^0.1.14 || ^0.2.0",
         "sql.js": "^1.4.0",
         "sqlite3": "^5.0.3",
@@ -10352,9 +10351,6 @@
         "better-sqlite3": {
           "optional": true
         },
-        "hdb-pool": {
-          "optional": true
-        },
         "ioredis": {
           "optional": true
         },
diff --git a/server/package.json b/server/package.json
index 83a4750..d93e231 100644
--- a/server/package.json
+++ b/server/package.json
@@ -29,7 +29,7 @@
     "langsmith": "^0.3.30",
     "reflect-metadata": "^0.2.2",
     "sqlite3": "^5.1.7",
-    "typeorm": "^0.3.20",
+    "typeorm": "^0.3.26",
     "winston": "^3.11.0",
     "zod": "^3.22.4"
   },