From d3caff916f3480e4b1a91367023e08fef0fc452c Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 9 Jan 2026 11:37:57 +0000
Subject: [PATCH] fix: packages/nocodb/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-QS-14724253
- https://snyk.io/vuln/SNYK-JS-VALIDATOR-13653476
- https://snyk.io/vuln/SNYK-JS-GLOB-14040952
- https://snyk.io/vuln/SNYK-JS-AXIOS-12613773
- https://snyk.io/vuln/SNYK-JS-MULTER-10773732
- https://snyk.io/vuln/SNYK-JS-MODELCONTEXTPROTOCOLSDK-14171914
- https://snyk.io/vuln/SNYK-JS-VALIDATOR-13395830
---
 packages/nocodb/package.json | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/packages/nocodb/package.json b/packages/nocodb/package.json
index f75b398431..025a6680cc 100644
--- a/packages/nocodb/package.json
+++ b/packages/nocodb/package.json
@@ -53,7 +53,7 @@
     "@aws-sdk/lib-storage": "^3.743.0",
     "@aws-sdk/s3-request-presigner": "^3.743.0",
     "@google-cloud/storage": "^7.15.0",
-    "@modelcontextprotocol/sdk": "^1.13.3",
+    "@modelcontextprotocol/sdk": "^1.24.0",
     "@napi-rs/canvas": "^0.1.77",
     "@nest-lab/throttler-storage-redis": "^1.1.0",
     "@nestjs/bull": "^10.2.3",
@@ -62,7 +62,7 @@
     "@nestjs/core": "^10.4.19",
     "@nestjs/event-emitter": "^2.1.1",
     "@nestjs/passport": "^10.0.3",
-    "@nestjs/platform-express": "^10.4.19",
+    "@nestjs/platform-express": "^10.4.20",
     "@nestjs/platform-socket.io": "^10.4.19",
     "@nestjs/throttler": "^6.4.0",
     "@nestjs/websockets": "^10.4.19",
@@ -75,7 +75,7 @@
     "ajv": "^8.17.1",
     "ajv-formats": "^2.1.1",
     "auto-bind": "^4.0.0",
-    "axios": "^1.9.0",
+    "axios": "^1.12.0",
     "bcryptjs": "^2.4.3",
     "bignumber.js": "^9.1.2",
     "boxen": "^5.1.2",
@@ -95,11 +95,11 @@
     "dotenv": "^8.6.0",
     "ejs": "^3.1.10",
     "emittery": "^0.13.1",
-    "express": "^4.21.2",
+    "express": "^4.22.0",
     "fast-deep-equal": "^3.1.3",
     "fast-levenshtein": "^2.0.6",
     "fs-extra": "^9.1.0",
-    "glob": "^10.4.5",
+    "glob": "^10.5.0",
     "handlebars": "^4.7.8",
     "handlebars-helpers-v2": "^2.2.0",
     "html-to-json-parser": "^2.0.1",
@@ -122,7 +122,7 @@
     "mime": "3.0.0",
     "minio": "^8.0.4",
     "mkdirp": "^2.1.6",
-    "multer": "^2.0.1",
+    "multer": "^2.0.2",
     "mysql2": "^3.14.1",
     "nanoid": "^3.3.8",
     "nc-lib-gui": "0.265.1",
@@ -161,7 +161,7 @@
     "twilio": "^4.23.0",
     "unpdf": "^1.2.1",
     "uuid": "^11.1.0",
-    "validator": "^13.12.0",
+    "validator": "^13.15.22",
     "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz",
     "zod": "^3.25.7"
   },