KUSANAGI Security Edition has been updated.
Changed so that composer.json, composer.lock, package.json, package-lock.json, and requirements.txt in the DocumentRoot are not accessible from Web by default.
This change takes effect from newly provisioned profiles.
You can apply the module update with the following command:
# dnf upgrade
If automatic updates of middleware are enabled in kusanagi autoupdate command, this fix will be applied automatically.