fix(deps): pin urllib3>=2.7.0 and idna>=3.15; apk upgrade in nginx stage; form-data override

backend/requirements.txt

@@ -9,6 +9,8 @@ bcrypt==4.0.1
 boto3>=1.43.0
 apscheduler>=3.11.0
 requests>=2.34.2
+urllib3>=2.7.0
+idna>=3.15
 pyyaml>=6.0.3
 toml>=0.10.2
 taxii2-client>=2.3.0

frontend/Dockerfile

@@ -34,6 +34,9 @@ RUN npm run build
 # ── Production Stage ───────────────────────────────────────────────────────
 FROM nginx:1.31.1-alpine3.23-slim AS production
 
+# Patch Alpine system packages (resolves openssl CVEs in base image)
+RUN apk update && apk upgrade --no-cache
+
 # Copy built files to nginx
 COPY --from=build /app/dist /usr/share/nginx/html
 

frontend/package.json

@@ -20,6 +20,9 @@
     "recharts": "^2.15.4",
     "remark-gfm": "^4.0.1"
   },
+  "overrides": {
+    "form-data": "^4.0.6"
+  },
   "devDependencies": {
     "@tailwindcss/vite": "^4.1.18",
     "@types/react": "^19.2.13",