[WIP] Update package.json to override node-forge version

[Copilot]

• Add "node-forge": "^1.3.0" to the overrides section in package.json to fix the ASN.1 Unbounded Recursion security vulnerability
• Verify the JSON remains valid and properly formatted
• Run code review and security checks

Original prompt

Problem

The project has a security vulnerability warning for node-forge:

node-forge has ASN.1 Unbounded Recursion

This is a known vulnerability (CVE-2022-24771/CVE-2022-24772/CVE-2022-24773) in node-forge versions prior to 1.3.0, where deeply nested ASN.1 structures could cause stack overflow due to unbounded recursion.

Solution

Update package.json to add node-forge to the overrides section to force the use of a patched version (1.3.0 or later). The overrides section already exists in the project for webpack-dev-server.

Current package.json overrides section:

"overrides": {
  "webpack-dev-server": "^5.2.2"
}

Updated overrides section should be:

"overrides": {
  "webpack-dev-server": "^5.2.2",
  "node-forge": "^1.3.0"
}

Acceptance Criteria

1. Add "node-forge": "^1.3.0" to the overrides section in package.json
2. Ensure the JSON remains valid and properly formatted
3. The override will force npm to use the patched version of node-forge for all transitive dependencies

This pull request was created as a result of the following prompt from Copilot chat.

Problem

The project has a security vulnerability warning for node-forge:

node-forge has ASN.1 Unbounded Recursion

This is a known vulnerability (CVE-2022-24771/CVE-2022-24772/CVE-2022-24773) in node-forge versions prior to 1.3.0, where deeply nested ASN.1 structures could cause stack overflow due to unbounded recursion.

Solution

Update package.json to add node-forge to the overrides section to force the use of a patched version (1.3.0 or later). The overrides section already exists in the project for webpack-dev-server.

Current package.json overrides section:

"overrides": {
  "webpack-dev-server": "^5.2.2"
}

Updated overrides section should be:

"overrides": {
  "webpack-dev-server": "^5.2.2",
  "node-forge": "^1.3.0"
}

Acceptance Criteria

1. Add "node-forge": "^1.3.0" to the overrides section in package.json
2. Ensure the JSON remains valid and properly formatted
3. The override will force npm to use the patched version of node-forge for all transitive dependencies

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.