[Snyk] Security upgrade express from 4.19.2 to 4.20.0

[mpogr]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• backend/package.json
• backend/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	666

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.
• Snyk has automatically assigned this pull request, set who gets assigned.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
👩‍💻 Set who automatically gets assigned
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[mpogr]

Checkmarx One – Scan Summary & Details – b1b9797a-b5e4-46d1-87ed-4a18f94014ab

Policy Management Violations - Pull/merge request blocked

Policy Name	Rule(s)	Break Build
No Net New High - Default Policy	New vulnerability of High severity level detected	true

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	CVE-2024-45296	Npm-path-to-regexp-0.1.7	Vulnerable Package
	CVE-2024-45296	Npm-path-to-regexp-1.8.0	Vulnerable Package
	CVE-2024-45590	Npm-body-parser-1.20.2	Vulnerable Package
	CVE-2024-43796	Npm-express-4.19.2	Vulnerable Package
	CVE-2024-43799	Npm-send-0.18.0	Vulnerable Package
	CVE-2024-43800	Npm-serve-static-1.15.0	Vulnerable Package
	CVE-2024-47068	Npm-rollup-2.79.1	Vulnerable Package
	Cx14b19a02-387a	Npm-body-parser-1.20.2	Vulnerable Package
	Cx14b19a02-387a	Npm-body-parser-1.20.3	Vulnerable Package

Fixed Issues

Severity	Issue	Source File / Package
	SQL_Injection	/backend/controllers/noteController.js: 54
	SQL_Injection	/backend/controllers/noteController.js: 41
	SQL_Injection	/backend/controllers/noteController.js: 40
	SQL_Injection	/backend/controllers/authController.js: 24
	SQL_Injection	/backend/controllers/authController.js: 24
	SQL_Injection	/backend/controllers/authController.js: 6
	SQL_Injection	/backend/controllers/noteController.js: 23
	SQL_Injection	/backend/controllers/noteController.js: 26
	SQL_Injection	/backend/controllers/noteController.js: 8