Node-Forge Update

[Angello-droid]

The node-forge version has been updated. Tested the card collection service locally, as the package is used for encryption.

[github-actions]

Checkmarx One – Scan Summary & Details – 3aa997dc-b4ca-4303-9b1e-939261e5cdf7

New Issues (6)

Checkmarx found the following issues in this Pull Request

#	Severity	Issue	Source File / Package	Checkmarx Insight
1		CVE-2025-7783	Npm-form-data-4.0.2	details Recommended version: 4.0.4 Description: Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with the pro... Attack Vector: NETWORK Attack Complexity: HIGH Vulnerable Package
2		CVE-2025-9288	Npm-sha.js-2.4.11	details Recommended version: 2.4.12 Description: Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js through 2.4.11. Attack Vector: NETWORK Attack Complexity: HIGH Vulnerable Package
3		CVE-2025-58754	Npm-axios-1.8.4	details Recommended version: 1.12.0 Description: Axios is a promise based HTTP client for the browser and Node.js. When Axios prior to version 1.12.0 runs on Node.js and is given a URL with the "d... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
4		CVE-2025-64718	Npm-js-yaml-4.1.0	details Recommended version: 4.1.1 Description: js-yaml is a JavaScript YAML parser and dumper. In js-yaml versions through 3.14.1 and 4.x through 4.1.0, it's possible for an attacker to modify t... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
5		CVE-2025-64718	Npm-js-yaml-3.14.1	details Recommended version: 3.14.2 Description: js-yaml is a JavaScript YAML parser and dumper. In js-yaml versions through 3.14.1 and 4.x through 4.1.0, it's possible for an attacker to modify t... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
6		CVE-2025-5889	Npm-brace-expansion-1.1.11	details Recommended version: 1.1.12 Description: A vulnerability was found in juliangruber brace-expansion. It has been rated as problematic. Affected by this issue is the function "expand" of the... Attack Vector: NETWORK Attack Complexity: HIGH Vulnerable Package

Policy Management Violations (1)

Policy Name	Rule(s)	Break Build
Quality Gate - v3	Open Source Vulnerable Package	false