[Snyk] Security upgrade express from 4.18.2 to 4.22.0

[tjenkinson]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-JS-QS-14724253	828

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[Copilot]

Pull request overview

This PR upgrades the Express dependency from version ^4.16.2 to ^4.22.0 to address a high-severity security vulnerability (SNYK-JS-QS-14724253) related to "Allocation of Resources Without Limits or Throttling" in the qs dependency used by Express.

• Bumps the Express version in package.json from ^4.16.2 to ^4.22.0
• Addresses a vulnerability with a severity score of 828/1000 in the qs package

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The package.json specifies express ^4.22.0, but the package-lock.json still references express version 4.18.2. This mismatch means the security fix won't actually be applied when installing dependencies. The package-lock.json must be regenerated with the new version (by running npm install) before merging this PR to ensure the vulnerability is actually addressed.