[Snyk] Fix for 2 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	Yes	Proof of Concept
	475/1000 Why? Has a fix available, CVSS 5	Prototype Pollution SNYK-JS-HAPIHOEK-548452	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @mojaloop/central-services-shared

The new version differs by 51 commits.

• 295ce35 Bugfix/fix for delete method being validated with body (#247)
• 72054c2 fix(endpoints.js): Fix minor typos for transactions callback url (#246)
• a18b39c fix(openapiBackend): Removed logger from `validationFail` function (#245)
• f481caa fix(endpoint.js): Fixed minor typo on `THIRDPARTY_CALLBACK_URL_CONSENT_REQUEST_PUT` (#244)
• 1450599 Pisp/feature/408 thirdparty callbacks (#243)
• ae84ce1 #313(pisp): Add THIRDPARTY_CALLBACK_URL endpoints (#242)
• 5112b0e Moved uuid4 to dependencies. (#241)
• fe58700 Add topic mapping for nofitication bulk-get (#240)
• 1a3075d #1375: Add bulk transfer-related event types and actions (#239)
• a6c1b84 added changes to cater for bulk quotes api (#237)
• 8ec5082 #1456: Added extensions list object for unsupported version error (#235)
• 80955f9 Feature/#1334 patch request notif (#234)
• d80967a added config for bulk-abort to fulfil and positions topicMap (#233)
• abd3e02 Feature/#1334 patch request notif (#232)
• 8afe1d7 Changes for bug https://github.com/ExtensionList missing when unsupported version requested for services mojaloop/project#1378 (#231)
• 24812c9 #1423: Bulk transfers error processing(#230)
• cb6b128 Feature/fix dependency audit issues for error handling (#229)
• 4612d08 Resolve some of central-services-shared audit issues (#228)
• ef657f2 #1381: Add Kafka topic mapping for 'timeout-reserved' action (#227)
• 78ee2f9 Feature/add spans to request openapi backend (#224)
• a6e6786 adding support for openapi backend events, as well as schema validati… (#221)
• 463b819 do not modify the headers in jwsSigner (#220)
• f585d81 added feature to JWS sign request (#217)
• d29c67e Update dependencies to fix 'cause' extension entry bug' (#218)

See the full diff

Package name: @now-ims/hapi-now-auth

The new version differs by 2 commits.

• dc778af 2.0.1
• 3dc134a updating core dependencies for security

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic