fixed security vulnerabilites

Author: Kanchan-Microsoft

src/ContentProcessorAPI/pyproject.toml

@@ -17,7 +17,8 @@ dependencies = [
     "pygments>=2.19.1",
     "pymongo>=4.11.1",
     "python-dotenv>=1.0.1",
-    "uvicorn[standard]>=0.34.0",
+    "uvicorn[standard]>=0.34.0", 
+    "h11==0.16.0",
 ]
 
 [dependency-groups]

src/ContentProcessorAPI/requirements.txt

@@ -174,9 +174,8 @@ filelock==3.17.0 \
     --hash=sha256:533dc2f7ba78dc2f0f531fc6c4940addf7b70a481e269a5a3b93be94ffbe8338 \
     --hash=sha256:ee4e77401ef576ebb38cd7f13b9b28893194acc20a8e68e18730ba9c0e54660e
     # via virtualenv
-h11==0.14.0 \
-    --hash=sha256:8f19fbbe99e72420ff35c00b27a34cb9937e902a8b810e2c88300c6f0a3b699d \
-    --hash=sha256:e3fe4ac4b851c468cc8363d500db52c2ead036020723024a109d37346efaa761
+h11==0.16.0 \
+    --hash=sha256:63cf8bbe7522de3bf65932fda1d9c2772064ffb3dae62d55932da54b31cb6c86
     # via
     #   httpcore
     #   uvicorn

src/ContentProcessorWeb/package-lock.json

@@ -4194,7 +4194,7 @@ axios@^1.1.3, axios@^1.7.5:
   integrity sha512-re4CqKTJaURpzbLHtIi6XpDv20/CnpXOtjRY5/CU32L8gU8ek9UIivcfvSWvmKEngmVbrUtPpdDwWDWL7DNHvg==
   dependencies:
     follow-redirects "^1.15.6"
-    form-data "^4.0.0"
+    form-data "^4.0.4"
     proxy-from-env "^1.1.0"
 
 axobject-query@^4.1.0:
@@ -6238,19 +6238,19 @@ fork-ts-checker-webpack-plugin@^6.5.0:
     semver "^7.3.2"
     tapable "^1.0.0"
 
-form-data@^3.0.0:
-  version "3.0.2"
-  resolved "https://registry.npmjs.org/form-data/-/form-data-3.0.2.tgz"
-  integrity sha512-sJe+TQb2vIaIyO783qN6BlMYWMw3WBOHA1Ay2qxsnjuafEOQFJ2JakedOQirT6D5XPRxDvS7AHYyem9fTpb4LQ==
+form-data@^3.0.4:
+  version "3.0.4"
+  resolved "https://registry.npmjs.org/form-data/-/form-data-3.0.4.tgz"
+  integrity sha512-BBBgZSW6jhBJWGwF6/xNm8LJSvGNLHLKaXXdl8Eq4TCg0hZeRjA2MBL7Ooi1rj5f2d6nWd8lZFhSNXeqYI7rGA==
   dependencies:
     asynckit "^0.4.0"
     combined-stream "^1.0.8"
     mime-types "^2.1.12"
 
-form-data@^4.0.0:
-  version "4.0.3"
-  resolved "https://registry.yarnpkg.com/form-data/-/form-data-4.0.3.tgz#608b1b3f3e28be0fccf5901fc85fb3641e5cf0ae"
-  integrity sha512-qsITQPfmvMOSAdeyZ+12I1c+CKSstAFAwu+97zrnWAbIr5u8wfsExUzCesVLC8NgHuRUqNN4Zy6UPWUTRGslcA==
+form-data@^4.0.4:
+  version "4.0.4"
+  resolved "https://registry.yarnpkg.com/form-data/-/form-data-4.0.4.tgz#f9b4fdf0fce2de5e24e20de0c62bbfc8c7c9ffaa"
+  integrity sha512-N3WJQrMPFP9L3MeTjVD0PsofFhDq/s3qQUbEqpQz3qTNT8ZBB4AhCQV6FBdUflWWh/zT7eRh4zFhUn4jIGjmfA==
   dependencies:
     asynckit "^0.4.0"
     combined-stream "^1.0.8"
@@ -7727,7 +7727,7 @@ jsdom@^16.6.0:
     decimal.js "^10.2.1"
     domexception "^2.0.1"
     escodegen "^2.0.0"
-    form-data "^3.0.0"
+    form-data "^3.0.4"
     html-encoding-sniffer "^2.0.1"
     http-proxy-agent "^4.0.1"
     https-proxy-agent "^5.0.0"