From 408c4470a5ef26e35108d529d34deb2e7acfdfd1 Mon Sep 17 00:00:00 2001
From: Deirdre Malone <dmalone@redhat.com>
Date: Thu, 23 Jul 2026 16:47:22 +0100
Subject: [PATCH 1/2] Fix for OCPBUGS-89702: CVE-2026-12143

---
 web/package-lock.json | 16 ++++++++--------
 web/package.json      |  3 ++-
 2 files changed, 10 insertions(+), 9 deletions(-)

diff --git a/web/package-lock.json b/web/package-lock.json
index e4976577e..07c16b49d 100644
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -14558,16 +14558,16 @@
       }
     },
     "node_modules/form-data": {
-      "version": "4.0.5",
-      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz",
-      "integrity": "sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==",
+      "version": "4.0.6",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz",
+      "integrity": "sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==",
       "license": "MIT",
       "dependencies": {
         "asynckit": "^0.4.0",
         "combined-stream": "^1.0.8",
         "es-set-tostringtag": "^2.1.0",
-        "hasown": "^2.0.2",
-        "mime-types": "^2.1.12"
+        "hasown": "^2.0.4",
+        "mime-types": "^2.1.35"
       },
       "engines": {
         "node": ">= 6"
@@ -15414,9 +15414,9 @@
       }
     },
     "node_modules/hasown": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
-      "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==",
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz",
+      "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==",
       "license": "MIT",
       "dependencies": {
         "function-bind": "^1.1.2"
diff --git a/web/package.json b/web/package.json
index e8fd45c2c..e04769c63 100644
--- a/web/package.json
+++ b/web/package.json
@@ -180,7 +180,8 @@
     "sass": {
       "immutable": "^5.1.5"
     },
-    "ws": "^8.21.0"
+    "ws": "^8.21.0",
+    "form-data": "^4.0.6"
   },
   "consolePlugin": {
     "name": "monitoring-plugin",

From b1b815042800062d482176b65012a9b70632a141 Mon Sep 17 00:00:00 2001
From: Deirdre Malone <dmalone@redhat.com>
Date: Wed, 5 Aug 2026 11:40:48 +0100
Subject: [PATCH 2/2] resolving conflict

---
 web/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/package.json b/web/package.json
index 5e0e25f69..b5621512a 100644
--- a/web/package.json
+++ b/web/package.json
@@ -182,7 +182,7 @@
       "immutable": "^5.1.5"
     },
     "ws": "^8.21.0",
-    "form-data": "^4.0.6"
+    "form-data": "^4.0.6",
     "dompurify": "^3.4.11"
   },
   "consolePlugin": {