diff --git a/Nutrihelp-api b/Nutrihelp-api index a871dac..4731ede 160000 --- a/Nutrihelp-api +++ b/Nutrihelp-api @@ -1 +1 @@ -Subproject commit a871dac79c455cdbe59b5c6cd65f3610438d806b +Subproject commit 4731edebf63d28863c9deb878565a804620350b6 diff --git a/README.md b/README.md index 4b76bea..fe1b86b 100644 --- a/README.md +++ b/README.md @@ -17,6 +17,13 @@ npm install npm start ``` +### Security Updates +- **2026-01-22**: Upgraded `jspdf` to v4.0.0 and `html2pdf.js` to v0.14.0 to fix critical vulnerabilities (CVE-2025-68428, CVE-2026-22787). + +## Key Features +### 🏥 Medical Data Breach Checker +The **Medical Data Breach Checker** is a privacy-focused tool that helps users protect their medical identity. By leveraging the *Have I Been Pwned* API, it scans for public data breaches specifically involving healthcare, insurance, or medical records. Searches are performed anonymously without logging any user data, and identified breaches are automatically categorized by risk level to help users prioritize their security actions. + ## Nutrihelp Frontend PR Submission Guidelines ### 1. Preparation Before Submission diff --git a/audit-report.json b/audit-report.json new file mode 100644 index 0000000..8bd5ec3 Binary files /dev/null and b/audit-report.json differ diff --git a/build/allergy-meal.html b/build/allergy-meal.html new file mode 100644 index 0000000..f93040c --- /dev/null +++ b/build/allergy-meal.html @@ -0,0 +1,94 @@ +import React from 'react'; +import '../styles/auth.css' +function Allergy() { + return ( +
{error}
+No medical data breaches found for {results.email}.
+However, always stay vigilant against phishing attempts.
++ This tool securely queries the official Have I Been Pwned API. + We operate on a Zero-Log Policy — your email is never stored, tracked, or shared. +
+{breach.title}
+Breach Date: {breach.breachDate}
++ Hover to learn more... +
+ ++ {description} +
++ It's not just about privacy. A compromised medical identity can have + real-world financial + and + legal consequences. + Explore the risks below. +
++ We believe in proactive health defense. This tool is free, private, and powered by the Have I Been Pwned API. We never store, log, or share your search query. +
+