[Snyk] Security upgrade parse-server from 2.3.2 to 4.5.1

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • appengine/parse-server/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	Yes	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-REDIS-1255645	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: parse-server

The new version differs by 250 commits.

• 9d90196 Update package-lock.json (#7499)
• 1443aae Update package.json (#7498)
• 366bb06 Merge branch 'master' into v4.5.1
• 147bd9a Merge pull request from GHSA-23r4-5mxp-c7g5
• c66a39f Remove quoted argument to fix issue on Windows (#7489)
• 8fddac3 feat(AggregateRouter): support native mongodb syntax in aggregation pipelines (#7339)
• 381e9bf bump node (#7487)
• fda07aa Add deprecation plan (#7485)
• f8c4f9f chore(deps): bump path-parse from 1.0.6 to 1.0.7 (#7484)
• ae1edeb Bump CI (#7482)
• 45d29cc fix: upgrade mongodb from 3.6.9 to 3.6.10 (#7474)
• cc3cd23 Fix missing password policy definitions (#7225)
• c8e822b Accept context via header X-Parse-Cloud-Context (#7437)
• c3b71ba [Snyk] Upgrade ws from 7.4.6 to 7.5.3 (#7457)
• 39f7c83 fix: upgrade @ apollographql/graphql-playground-html from 1.6.28 to 1.6.29 (#7473)
• c58bf57 fix: upgrade @ apollographql/graphql-playground-html from 1.6.27 to 1.6.28 (#7411)
• bbd7ee7 fix: upgrade graphql from 15.5.0 to 15.5.1 (#7462)
• a95ad89 [Snyk] Security upgrade parse from 3.2.0 to 3.3.0 (#7464)
• 1fe4708 fix: upgrade apollo-server-express from 2.25.1 to 2.25.2 (#7465)
• 2b3355c fix: upgrade graphql-tag from 2.12.4 to 2.12.5 (#7466)
• 9923cd3 fix: upgrade graphql-relay from 0.7.0 to 0.8.0 (#7467)
• 4703822 Add MongoDB 5.0 support + bump CI env (#7469)
• 250008d changed twitter API endpoint for oauth test (#7472)
• 1594afe add runtime deprecation warning (#7451)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic