[Snyk] Fix for 2 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Prototype Pollution SNYK-JS-AJV-584908	No	No Known Exploit
	Insecure Randomness SNYK-JS-CRYPTOJS-548472	No	No Known Exploit

Commit messages

Package name: ccxt

The new version differs by 250 commits.

• 310d123 1.18.609
• 8e50b4d Merge branch 'frosty00-vendor-cryptojs' #4875 fix #5180
• 8ca3989 Merge branch 'vendor-cryptojs' of https://github.com/frosty00/ccxt into frosty00-vendor-cryptojs
• 325cbca 1.18.608
• ebdca74 removed a reference to node 'constants' from Node-RSA.js
• 4a02c13 oceanex py/php files
• 281c710 remove a reference to node 'constants' from node-rsa pkcs1.js
• dbc66b6 Update pkcs1.js
• 7a6c56d revert .travis.yml
• c2f5ce6 cleanup .travis.yml cache
• fbfa5dc 1.18.607
• ede89d7 bx.in.th minor edit
• e8b5e75 Merge branch 'master' of github.com:ccxt/ccxt
• 662ff7a 1.18.606
• 8ebd879 Merge pull request #5219 from npomfret/master
• a2b09c6 quotes in Exchange.js
• 31e92dd livecoin LEO → LeoCoin fix #5226
• f877a0a bx.in.th LEO → LeoCoin fix #5226
• 98a43f3 bittrex parseTransaction minor edit
• 79952d0 Update bittrex.js
• 2b7977f bittrex v3 hostname support
• 2e6c547 bittrex fetchClosedOrdersV3 cleanup
• eedc5c1 bittrex parseOrderV3 minor edits
• f5866ce bittrex v3 minor edits

See the full diff

Package name: har-validator

The new version differs by 10 commits.

• a38c067 5.1.3
• 45c48fa chore(deps): lock file maintenance (Update default_logic.js DeviaVir/zenbot#106)
• 957913b chore(release): 5.1.2 [skip ci]
• 1764b7c fix(docs): update badge links
• 75dfab0 chore(release): 5.1.1 [skip ci]
• fd01aff fix(scaffold): update project scaffold template
• 759bffe Update AJV to version 6 (Bot not trading DeviaVir/zenbot#109)
• e0fee11 chore(deps): update dependency tap to v12 (Trading fees eating profits DeviaVir/zenbot#108)
• d09cc80 Prefer const over let (Project status. DeviaVir/zenbot#111)
• a19a82d build(renovate): replace dependencies.io with Renovate app

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic