[Snyk] Fix for 115 vulnerabilities #1

obayemmy · 2024-11-08T14:39:29Z

Snyk has created this PR to fix 115 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

package.json
package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Prototype Pollution SNYK-JS-LODASH-567746	****
	Prototype Pollution SNYK-JS-LODASH-608086	****
	Prototype Pollution SNYK-JS-LODASH-6139239	****
	Prototype Pollution SNYK-JS-LODASH-73638	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-174116	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342073	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342082	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-451540	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-584281	****
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	****
	Prototype Pollution SNYK-JS-MINIMIST-2429795	****
	Prototype Pollution SNYK-JS-MINIMIST-559764	****
	Prototype Pollution SNYK-JS-MIXINDEEP-450212	****
	Directory Traversal SNYK-JS-MOMENT-2440688	****
	Denial of Service (DoS) SNYK-JS-MONGODB-473855	****
	Prototype Pollution SNYK-JS-MONGOOSE-1086688	****
	Prototype Pollution SNYK-JS-MONGOOSE-2961688	****
	Information Exposure SNYK-JS-MONGOOSE-472486	****
	Prototype Pollution SNYK-JS-MONGOOSE-5777721	****
	Prototype Pollution SNYK-JS-MPATH-1577289	****
	Prototype Pollution SNYK-JS-MQUERY-1050858	****
	Prototype Pollution SNYK-JS-MQUERY-1089718	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	****
	Prototype Poisoning SNYK-JS-QS-3153490	****
	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	****
	Cross-site Scripting SNYK-JS-SEND-7926862	****
	Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	****
	Prototype Pollution SNYK-JS-SETVALUE-1540541	****
	Prototype Pollution SNYK-JS-SETVALUE-450213	****
	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	****
	Prototype Pollution SNYK-JS-TYPEORM-590152	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251	****
	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090599	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090600	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090601	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090602	****
	Prototype Pollution SNYK-JS-XML2JS-5414874	****
	Prototype Pollution SNYK-JS-Y18N-1021887	****
	Prototype Pollution SNYK-JS-YARGSPARSER-560381	****
	Arbitrary File Write via Archive Extraction (Zip Slip) npm:adm-zip:20180415	899
	Regular Expression Denial of Service (ReDoS) SNYK-JS-CROSSSPAWN-8303230	828
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962463	786
	Denial of Service (DoS) SNYK-JS-DICER-2311764	761
	Uninitialized Memory Exposure npm:npmconf:20180512	756
	Prototype Pollution SNYK-JS-DUSTJSLINKEDIN-1089257	751
	DLL Injection SNYK-JS-KERBEROS-568900	741
	Remote Code Execution (RCE) SNYK-JS-EJS-2803307	726
	Arbitrary Code Execution SNYK-JS-HANDLEBARS-534478	726
	Cross-site Scripting (XSS) SNYK-JS-JQUERY-567880	711
	Remote Memory Exposure SNYK-JS-BL-608877	706
	Prototype Pollution SNYK-JS-HANDLEBARS-534988	704
	Cross-site Scripting (XSS) SNYK-JS-JQUERY-565129	701
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	696
	Prototype Pollution SNYK-JS-ASYNC-2441827	696
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	696
	Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	696
	Prototype Pollution SNYK-JS-EXPRESSFILEUPLOAD-595969	696
	Regular Expression Denial of Service (ReDoS) npm:marked:20180225	696
	Prototype Pollution SNYK-JS-INI-1048974	686
	Prototype Pollution SNYK-JS-LODASH-450202	686
	Code Injection SNYK-JS-LODASH-1040724	681
	Remote Code Execution (RCE) SNYK-JS-HANDLEBARS-1056767	671
	Cross-site Scripting (XSS) npm:marked:20150520	654
	Prototype Pollution SNYK-JS-HANDLEBARS-567742	646
	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	644
	Code Injection npm:dustjs-linkedin:20160819	644
	Open Redirect npm:st:20171013	644
	Remote Memory Exposure npm:mongoose:20160116	641
	Prototype Pollution npm:lodash:20180130	636
	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	631
	Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	624
	Prototype Pollution SNYK-JS-AJV-584908	619
	Arbitrary Code Execution npm:ejs:20161128	619
	Prototype Pollution SNYK-JS-HANDLEBARS-1279029	601
	Prototype Pollution SNYK-JS-JQUERY-174006	601
	Denial of Service (DoS) SNYK-JS-EXPRESSFILEUPLOAD-473997	589
	Denial of Service (DoS) SNYK-JS-HANDLEBARS-480388	589
	Regular Expression Denial of Service (ReDoS) npm:fresh:20170908	589
	Cross-site Scripting (XSS) npm:marked:20170112	589
	Cross-site Scripting (XSS) npm:marked:20170815	589
	Regular Expression Denial of Service (ReDoS) npm:marked:20170907	589
	Regular Expression Denial of Service (ReDoS) npm:negotiator:20160616	589
	Prototype Override Protection Bypass npm:qs:20170213	589
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	586
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	586
	Directory Traversal npm:st:20140206	586
	Directory Traversal SNYK-JS-ADMZIP-1065796	584
	Prototype Pollution SNYK-JS-HANDLEBARS-173692	579
	Prototype Pollution SNYK-JS-HANDLEBARS-174183	579
	Prototype Pollution SNYK-JS-HANDLEBARS-469063	579
	Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	529
	Arbitrary Code Injection SNYK-JS-EJS-1049328	526
	Open Redirect SNYK-JS-EXPRESS-6474509	519
	Cross-site Scripting (XSS) npm:ejs:20161130	509
	Denial of Service (DoS) npm:ejs:20161130-1	509
	Regular Expression Denial of Service (ReDoS) npm:moment:20161019	509
	Validation Bypass SNYK-JS-KINDOF-537849	506
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	506
	Prototype Pollution SNYK-JS-HIGHLIGHTJS-1045326	504
	Cross-site Scripting (XSS) npm:jquery:20150627	484
	Improper Control of Dynamically-Managed Code Resources SNYK-JS-EJS-6689533	479
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HIGHLIGHTJS-1048676	479
	Regular Expression Denial of Service (ReDoS) npm:ms:20151024	479
	Cross-site Scripting SNYK-JS-EXPRESS-7926867	469
	Denial of Service (DoS) npm:mem:20180117	469
	Cross-site Scripting (XSS) npm:marked:20170815-1	454
	Reverse Tabnabbing SNYK-JS-ISTANBULREPORTS-2328088	429
	Regular Expression Denial of Service (ReDoS) npm:mime:20170907	399
	Regular Expression Denial of Service (ReDoS) npm:moment:20170905	399
	Regular Expression Denial of Service (ReDoS) npm:ms:20170412	399

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Directory Traversal
🦉 Prototype Pollution
🦉 Regular Expression Denial of Service (ReDoS)
🦉 More lessons are available in Snyk Learn