Updated react-pdf dependency

[bexsoft]

What does this do?

Updated react-pdf dependency as mentioned in wojtekmaj/react-pdf#1786

According this document audit alert will still appear until mozilla/pdf.js#18051 gets merged & applied to react-pdf library. In the meantime the issue cannot be exploited as react-pdf in their latest version enforced the use of isEvalSupported function to false.

[prakashsvmx]

@bexsoft looks like it is failing in CI
yarn audit v1.22.22
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high │ PDF.js vulnerable to arbitrary JavaScript execution upon │
│ │ opening a malicious PDF │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ pdfjs-dist │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=4.2.67 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ react-pdf │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ react-pdf > pdfjs-dist │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1097244 │
└───────────────┴──────────────────────────────────────────────────────────────┘
1 vulnerabilities found - Packages audited: 540

[bexsoft]

@bexsoft looks like it is failing in CI yarn audit v1.22.22 ┌───────────────┬──────────────────────────────────────────────────────────────┐ │ high │ PDF.js vulnerable to arbitrary JavaScript execution upon │ │ │ opening a malicious PDF │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ pdfjs-dist │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Patched in │ >=4.2.67 │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Dependency of │ react-pdf │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Path │ react-pdf > pdfjs-dist │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ More info │ https://www.npmjs.com/advisories/1097244 │ └───────────────┴──────────────────────────────────────────────────────────────┘ 1 vulnerabilities found - Packages audited: 540

Yes @prakashsvmx This is expected according wojtekmaj/react-pdf#1786, this updated react-pdf version avoids the exploit of this issue according to the creator of the library