[Snyk] Security upgrade express from 4.17.1 to 4.22.0

[s403o]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-JS-QS-14724253	828

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.
• Snyk has automatically assigned this pull request, set who gets assigned.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
👩‍💻 Set who automatically gets assigned
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[Copilot]

Pull request overview

This PR upgrades Express from version 4.17.1 to 4.22.0 to address a high-severity security vulnerability (SNYK-JS-QS-14724253) related to resource allocation without limits in the qs package dependency.

Key Changes

• Express framework upgraded from 4.17.1 to 4.22.0
• The qs package (Express transitive dependency) upgraded from 6.7.0 to 6.14.1, which includes the critical security fix
• Multiple supporting packages updated as part of the Express dependency tree

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Updates Express dependency version from ^4.17.1 to ^4.22.0
package-lock.json	Updates Express and all transitive dependencies including the vulnerable qs package, adding new security-related dependencies and updating versions across the dependency tree

This is a legitimate security patch generated by Snyk that addresses a high-severity vulnerability while maintaining backward compatibility within the Express 4.x major version line. The upgrade includes important security fixes in the query string parsing library (qs) that prevents resource exhaustion attacks. No code changes are required as Express 4.22.0 maintains API compatibility with 4.17.1.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.