[Sev1] NumberField bug fix (#4166)

api/audit-ci.json

@@ -1,7 +1,10 @@
 {
   "low": true,
   "package-manager": "yarn",
-  "allowlist": ["*|migrate-mongoose>yargs>yargs-parser"],
+  "allowlist": [
+    "*|migrate-mongoose>yargs>yargs-parser",
+    "*|multer>busboy>dicer"
+  ],
   "_comment": {
     "yargs-parser": {
       "advisory": "https://github.com/advisories/GHSA-p9pc-299p-vxgp",
@@ -10,6 +13,14 @@
       "affects": [
         "migrate-mongoose@4.0.0 - used during migration process, but not active in production"
       ]
+    },
+    "dicer": {
+      "advisory": "https://github.com/advisories/GHSA-wm7h-9275-46v2",
+      "modules": "dicer",
+      "cvss-score": "7.5 high",
+      "affects": [
+        "this is used by multer for handling file uploads. currently no fix available, but we have replaced multer in an upcoming release"
+      ]
     }
   }
 }

api/package.json

@@ -110,7 +110,7 @@
     "newrelic": "^8.9.1",
     "pg": "8.7.3",
     "sanitize-html": "2.7.0",
-    "sharp": "0.30.2",
+    "sharp": "0.30.5",
     "swagger-ui-express": "4.3.0",
     "uuid": "8.3.2",
     "winston": "3.6.0",
@@ -143,7 +143,9 @@
     "testTimeout": 30000
   },
   "resolutions": {
-    "minimist": ">=1.2.6"
+    "minimist": ">=1.2.6",
+    "protobufjs": ">=6.11.3",
+    "got": ">=12.1.0"
   },
   "packageManager": "yarn@1.22.18"
 }