From 32e1127ffdb0a7dddf248485c3cb12dae262f68c Mon Sep 17 00:00:00 2001
From: Jimmy Conner <jconner@ciq.com>
Date: Sun, 21 Jun 2026 22:33:23 -0500
Subject: [PATCH] Upgrade http-proxy-middleware to resolve CVE-2026-55603
 CVE-2026-55602

---
 awx/ui/package-lock.json | 16 ++++++++--------
 awx/ui/package.json      |  2 +-
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/awx/ui/package-lock.json b/awx/ui/package-lock.json
index 79e3c2cdf..c3201747d 100644
--- a/awx/ui/package-lock.json
+++ b/awx/ui/package-lock.json
@@ -79,7 +79,7 @@
         "fs-extra": "^11.3.5",
         "globals": "^17.4.0",
         "html-webpack-plugin": "^5.6.7",
-        "http-proxy-middleware": "4.0.0",
+        "http-proxy-middleware": "4.1.1",
         "inject-manifest-plugin": "^0.6.5",
         "jest": "^30.3.0",
         "jest-environment-jsdom": "^30.3.0",
@@ -13918,14 +13918,14 @@
       }
     },
     "node_modules/http-proxy-middleware": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-4.0.0.tgz",
-      "integrity": "sha512-wuHwaUtmC0XzJNHqRp41zXtt5ojpHbusXGhq6781VvnjWUYPu7opmOF3eomGNujT07kEOnHWZyV9UZzKimVCKA==",
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-4.1.1.tgz",
+      "integrity": "sha512-KX5ZofGXLFXqFAkQoOWZ+rTtaLTut7m0gyL+QzJrdejtIZ+F4bPPDoe7reISg2+v0CAz5OfVwEJEhty7X+e57g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "debug": "^4.4.3",
-        "httpxy": "^0.5.1",
+        "httpxy": "^0.5.3",
         "is-glob": "^4.0.3",
         "is-plain-obj": "^4.1.0",
         "micromatch": "^4.0.8"
@@ -24393,9 +24393,9 @@
       }
     },
     "node_modules/webpack-dev-server/node_modules/http-proxy-middleware": {
-      "version": "2.0.9",
-      "resolved": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-2.0.9.tgz",
-      "integrity": "sha512-c1IyJYLYppU574+YI7R4QyX2ystMtVXZwIdzazUIPIJsHuWNd+mho2j+bKoHftndicGj9yh+xjd+l0yj7VeT1Q==",
+      "version": "2.0.10",
+      "resolved": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-2.0.10.tgz",
+      "integrity": "sha512-RKzRWNPxUZqbuk3BC5mGVJbBnWgr+diEnjJexIOytFbBzDy88Fbh/YvBr3DsNrl1jYAfjWfpATEv0NO35FDuPQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
diff --git a/awx/ui/package.json b/awx/ui/package.json
index eb7204749..6f81459c4 100644
--- a/awx/ui/package.json
+++ b/awx/ui/package.json
@@ -79,7 +79,7 @@
     "fs-extra": "^11.3.5",
     "globals": "^17.4.0",
     "html-webpack-plugin": "^5.6.7",
-    "http-proxy-middleware": "4.0.0",
+    "http-proxy-middleware": "4.1.1",
     "inject-manifest-plugin": "^0.6.5",
     "jest": "^30.3.0",
     "jest-environment-jsdom": "^30.3.0",