chore(fe): fix CWE-79 vulnerability

[mamartinezmejia]

Description

This pull request addresses a high-severity prototype pollution XSS vulnerability in the dompurify package.

Security Issue

• CVE ID: CVE-2026-41238
• Severity: High
• Vulnerability Type: Prototype Pollution leading to XSS bypass via CUSTOM_ELEMENT_HANDLING
• Affected Package: dompurify (transitive dependency)
• Current Version: 3.4.0
• Fixed Version: 3.4.10

Changes

Updated the dompurify package version from 3.4.0 to 3.4.10 via the package.json overrides configuration to ensure the security patch is applied across the dependency tree.

Files Changed

• package.json — updated override for dompurify package
• package-lock.json — automatically updated by npm install

Testing

• Ran npm install to verify dependency resolution
• Confirmed package-lock.json was updated with the patched version

Closing Issue

Closes #249

---

Thanks for the PR!

Deployments, as required, will be available below:
Any successful deployments (not always required) will be available here

Please create PRs in draft mode. Mark as ready to enable:

• Analysis Workflow

After merge, new images are deployed in:

• Merge Workflow

[github-actions]

There is no coverage information present for the Files changed

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

Files not reviewed (1)

• frontend/package-lock.json: Generated file

[github-actions]

There is no coverage information present for the Files changed