Files
Fail2Ban-Dashboard---NPM/dashboard/package.json
gitea 20c6f5ead7 fix: replace vulnerable ip package with ipaddr.js + node built-ins
ip had a high severity SSRF vuln (GHSA-2p57-rm9w-gvfp) with no upstream fix.
Replace with:
- net.isIPv4/isIPv6 (Node built-in) for format validation
- ipaddr.js for CIDR subnet matching

Add package-lock.json for reproducible builds (required for npm ci).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-20 15:45:04 +00:00

19 lines
384 B
JSON

{
"name": "f2b-control-center",
"version": "1.0.0",
"description": "Fail2Ban dashboard for Nginx Proxy Manager — batteries-included security monitoring",
"main": "server.js",
"scripts": {
"start": "node server.js"
},
"engines": {
"node": ">=18"
},
"dependencies": {
"dotenv": "*",
"express": "*",
"ipaddr.js": "*",
"node-fetch": "^2"
}
}