[Snyk] Security upgrade express from 4.19.2 to 4.21.2

[mpogr]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• backend/package.json
• backend/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-8482416	721

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.
• Snyk has automatically assigned this pull request, set who gets assigned.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
👩‍💻 Set who automatically gets assigned
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[mpogr]

Checkmarx One – Scan Summary & Details – 6aaa5790-a159-415b-9dda-f55ca768b51c

Policy Management Violations - Pull/merge request blocked

Policy Name	Rule(s)	Break Build
No Net New High - Default Policy	New vulnerability of High severity level detected	true

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	CVE-2024-21536	Npm-http-proxy-middleware-2.0.6	Vulnerable Package
	CVE-2024-21538	Npm-cross-spawn-7.0.3	Vulnerable Package
	CVE-2024-45296	Npm-path-to-regexp-0.1.7	Vulnerable Package
	CVE-2024-45296	Npm-path-to-regexp-1.8.0	Vulnerable Package
	CVE-2024-45590	Npm-body-parser-1.20.2	Vulnerable Package
	CVE-2024-43796	Npm-express-4.19.2	Vulnerable Package
	CVE-2024-43799	Npm-send-0.18.0	Vulnerable Package
	CVE-2024-43800	Npm-serve-static-1.15.0	Vulnerable Package
	CVE-2024-47068	Npm-rollup-2.79.1	Vulnerable Package
	CVE-2024-47764	Npm-cookie-0.4.1	Vulnerable Package
	CVE-2024-47764	Npm-cookie-0.6.0	Vulnerable Package
	Cx14b19a02-387a	Npm-body-parser-1.20.2	Vulnerable Package
	Cx14b19a02-387a	Npm-body-parser-1.20.3	Vulnerable Package

Fixed Issues

Severity	Issue	Source File / Package
	SQL_Injection	/backend/controllers/noteController.js: 54
	SQL_Injection	/backend/controllers/noteController.js: 41
	SQL_Injection	/backend/controllers/noteController.js: 40
	SQL_Injection	/backend/controllers/authController.js: 24
	SQL_Injection	/backend/controllers/authController.js: 24
	SQL_Injection	/backend/controllers/authController.js: 6
	SQL_Injection	/backend/controllers/noteController.js: 23
	SQL_Injection	/backend/controllers/noteController.js: 26
	SQL_Injection	/backend/controllers/noteController.js: 8