From 070b402358c6748404d6861d1f66c0bd96e63b20 Mon Sep 17 00:00:00 2001
From: kitos <kitos@aegis.local>
Date: Thu, 25 Jun 2026 13:26:06 +0200
Subject: [PATCH] fix(deps): pin urllib3>=2.7.0 and idna>=3.15; apk upgrade in
 nginx stage; form-data override

---
 backend/requirements.txt | 2 ++
 frontend/Dockerfile      | 3 +++
 frontend/package.json    | 3 +++
 3 files changed, 8 insertions(+)

diff --git a/backend/requirements.txt b/backend/requirements.txt
index a7fd8ba..2d8e50a 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -9,6 +9,8 @@ bcrypt==4.0.1
 boto3>=1.43.0
 apscheduler>=3.11.0
 requests>=2.34.2
+urllib3>=2.7.0
+idna>=3.15
 pyyaml>=6.0.3
 toml>=0.10.2
 taxii2-client>=2.3.0
diff --git a/frontend/Dockerfile b/frontend/Dockerfile
index e07ed27..c1bcf47 100644
--- a/frontend/Dockerfile
+++ b/frontend/Dockerfile
@@ -34,6 +34,9 @@ RUN npm run build
 # ── Production Stage ───────────────────────────────────────────────────────
 FROM nginx:1.31.1-alpine3.23-slim AS production
 
+# Patch Alpine system packages (resolves openssl CVEs in base image)
+RUN apk update && apk upgrade --no-cache
+
 # Copy built files to nginx
 COPY --from=build /app/dist /usr/share/nginx/html
 
diff --git a/frontend/package.json b/frontend/package.json
index 196f10d..1213b62 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -20,6 +20,9 @@
     "recharts": "^2.15.4",
     "remark-gfm": "^4.0.1"
   },
+  "overrides": {
+    "form-data": "^4.0.6"
+  },
   "devDependencies": {
     "@tailwindcss/vite": "^4.1.18",
     "@types/react": "^19.2.13",