[Snyk] Fix for 3 vulnerabilities

[s403o]

Snyk has created this PR to fix 3 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Uncontrolled Recursion SNYK-JS-NODEFORGE-14125745	721
	Prototype Pollution SNYK-JS-EXPRESS-14157151	631
	Integer Overflow or Wraparound SNYK-JS-NODEFORGE-14125097	601

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.
• Snyk has automatically assigned this pull request, set who gets assigned.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
👩‍💻 Set who automatically gets assigned
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

[Copilot]

Pull request overview

This PR updates npm dependencies to fix 3 security vulnerabilities identified by Snyk: uncontrolled recursion in node-forge (high severity), prototype pollution in express (medium severity), and integer overflow in node-forge (medium severity).

Key changes:

• Updates express from 4.17.1 to 4.22.0 (minor version) to fix prototype pollution vulnerability
• Updates google-auth-library from 6.1.6 to 9.0.0 (major version) which removes the vulnerable node-forge dependency
• Removes transitive dependencies that are no longer needed, including node-forge, google-p12-pem, abort-controller, arrify, event-target-shim, and fast-text-encoding

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Updates express to 4.22.0 and google-auth-library to 9.0.0 to address security vulnerabilities
package-lock.json	Updates dependency tree with new versions, removes node-forge and related deprecated dependencies, adds new transitive dependencies required by updated packages

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.