From 8bea4c0125cd955e030f790a44e06fd18c2ba78b Mon Sep 17 00:00:00 2001
From: Arman Jivanyan <arman.jivanyan@devexpress.com>
Date: Thu, 27 Nov 2025 15:10:55 +0400
Subject: [PATCH] fix remaining high vulnerabilities

---
 package.json                                               | 1 +
 packages/devextreme-cli/package-lock.json                  | 7 -------
 packages/devextreme-cli/package.json                       | 1 -
 .../devextreme-cli/testing/app-template.test.shared.js     | 4 ++--
 4 files changed, 3 insertions(+), 10 deletions(-)

diff --git a/package.json b/package.json
index 50595bb84..58fff1b30 100644
--- a/package.json
+++ b/package.json
@@ -23,6 +23,7 @@
     "form-data@>=4.0.0 <4.0.4": ">=4.0.4",
     "tar-fs@>=3.0.0 <3.1.1": ">=3.1.1",
     "ws@>=8.0.0 <8.17.1": ">=8.17.1",
+    "braces@<3.0.3": "3.0.3",
     "cross-spawn": "7.0.6"
   }
 }
diff --git a/packages/devextreme-cli/package-lock.json b/packages/devextreme-cli/package-lock.json
index 528c29c57..2c602fda8 100644
--- a/packages/devextreme-cli/package-lock.json
+++ b/packages/devextreme-cli/package-lock.json
@@ -38,7 +38,6 @@
         "eslint-plugin-unused-imports": "^1.1.5",
         "eslint-plugin-vue": "^7.20.0",
         "eslint-stylish": "^0.2.0",
-        "ip": "^1.1.9",
         "jest": "^29.7.0",
         "jest-image-snapshot": "^6.5.1",
         "prettier": "^2.8.8",
@@ -13039,12 +13038,6 @@
         "side-channel": "^1.1.0"
       }
     },
-    "ip": {
-      "version": "1.1.9",
-      "resolved": "https://registry.npmjs.org/ip/-/ip-1.1.9.tgz",
-      "integrity": "sha512-cyRxvOEpNHNtchU3Ln9KC/auJgup87llfQpQ+t5ghoC/UhL16SWzbueiCsdTnWmqAWl7LadfuwhlqmtOaqMHdQ==",
-      "dev": true
-    },
     "is-array-buffer": {
       "version": "3.0.5",
       "resolved": "https://registry.npmjs.org/is-array-buffer/-/is-array-buffer-3.0.5.tgz",
diff --git a/packages/devextreme-cli/package.json b/packages/devextreme-cli/package.json
index f1ed2c742..15b1ca032 100644
--- a/packages/devextreme-cli/package.json
+++ b/packages/devextreme-cli/package.json
@@ -63,7 +63,6 @@
     "eslint-plugin-unused-imports": "^1.1.5",
     "eslint-plugin-vue": "^7.20.0",
     "eslint-stylish": "^0.2.0",
-    "ip": "^1.1.9",
     "jest": "^29.7.0",
     "jest-image-snapshot": "^6.5.1",
     "prettier": "^2.8.8",
diff --git a/packages/devextreme-cli/testing/app-template.test.shared.js b/packages/devextreme-cli/testing/app-template.test.shared.js
index 4de32dfcd..1776a39b6 100644
--- a/packages/devextreme-cli/testing/app-template.test.shared.js
+++ b/packages/devextreme-cli/testing/app-template.test.shared.js
@@ -1,12 +1,12 @@
 const path = require('path');
 const waitOn = require('wait-on');
-const ip = require('ip');
 
 const getBrowser = require('./utils/puppeteer').getBrowser;
 const { viewports, themes, layouts } = require('./constants');
 const DevServer = require('./dev-server');
 
 const defaultLayout = 'side-nav-outer-toolbar';
+const defaultHost = process.env.APP_TEMPLATE_HOST || process.env.HOST || '127.0.0.1';
 
 module.exports = (env, { port = 8080, urls = {} } = {}) => {
     const diffSnapshotsDir = path.join('testing/__tests__/__diff_snapshots__', env.engine);
@@ -26,7 +26,7 @@ module.exports = (env, { port = 8080, urls = {} } = {}) => {
 
                     describe(layout, () => {
                         const devServer = new DevServer(env, { port });
-                        const appUrl = `http://${ip.address()}:${port}/`;
+                        const appUrl = `http://${defaultHost}:${port}/`;
 
                         let browser;
                         let page;