[Snyk] Fix for 1 vulnerabilities

[rasputtintin]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LODASH-6139239	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @mojaloop/central-services-shared

The new version differs by 89 commits.

• 14f0b3e feat(2151)!: helm-release-v12.1.0 (#297)
• a5d9141 chore: fix service type typescript enum (#296)
• 5aaf087 fix(#2182)!: regex validations against swagger interface spec no longer working (#295)
• 0e538d8 chore: bump package version (#294)
• fc4fe7e chore: add 'example' as whitelisted keyword (#293)
• 6f9496d chore: address vulnerabilities (#291)
• 6275eb0 chore: add services endpoints (#290)
• 5860510 feat(#2119): fixes for updated for AJV error objects change (#289)
• b83a8bd fixed typo (#288)
• aee59ed Feature/#2057 refactoring for cs ([Snyk] Security upgrade @now-ims/hapi-now-auth from 2.0.0 to 2.0.1 #3) (#284)
• 082d373 chore: add PATCH consentRequests endpoint (#279)
• 7702879 chore: add enums to interface (#278)
• 5dcbe73 chore: add consent and consent request events and patch action (#277)
• 9f8713f chore: add accounts callback endpoints (#275)
• 5e49222 chore: add enums and bump package (#274)
• f6009d7 chore: 1975 update deps (#273)
• f678b43 [Security] Bump axios from 0.21.0 to 0.21.1 (#269)
• a8bfb9c Bump urijs from 1.19.2 to 1.19.5 (#270)
• 7b00ed8 [Security] Bump urijs from 1.19.2 to 1.19.5 (#268)
• 46d88e6 #1885: Fix for "multiple servers per repo" use case (#267)
• cbd0434 Hotfix: Fix dependencies for API documentation (#264)
• 327a51c chore: update license file (#265)
• df81389 #1885: Add API documentation utility, plugin, and endpoints (#263)
• 9c88000 Add FSPIOP headers validation for bulk transfers (#262)

See the full diff

Package name: @mojaloop/event-sdk

The new version differs by 25 commits.

• 28ce298 chore(release): 11.0.0 [skip ci]
• 6fa9f74 feat(mojaloop/#2092): upgrade nodeJS version for core services (fix(mojaloop/#2538): fspiop api version negotiation not handled mojaloop/bulk-api-adapter#67)
• f5d863a chore: add tsconfig option to build declaration file (Bump path-parse from 1.0.6 to 1.0.7 mojaloop/bulk-api-adapter#64)
• 085a6ae feat(2151): helm release v12.1.0 (feat(2151): helm-release-v12.1.0 mojaloop/bulk-api-adapter#56)
• 4eea6cd feat(2151): helm-release-v12.1.0 (Bump handlebars from 4.7.6 to 4.7.7 mojaloop/bulk-api-adapter#55)
• 86d4c3d feat(ci/cd): add pr title check (Bump axios from 0.21.0 to 0.21.1 mojaloop/bulk-api-adapter#47)
• 8eec478 chore: update license file ([Snyk] Fix for 16 vulnerabilities #45)
• fa0d1ff Bump ini from 1.3.5 to 1.3.7 ([Snyk] Fix for 1 vulnerabilities #46)
• 5aef313 Bump highlight.js from 10.1.1 to 10.4.1 ([Snyk] Fix for 1 vulnerabilities #44)
• e6597ac update dependencies to remove vulnerabilities ([Snyk] Fix for 1 vulnerabilities #42)
• 45ca858 updated link ([Snyk] Fix for 1 vulnerabilities #40)
• bd02ba9 Resolve some of the audit issues ([Snyk] Security upgrade @mojaloop/central-services-shared from 8.7.1 to 18.3.0 #39)
• ea95367 Feature/#1383 doc update ([Snyk] Security upgrade request from 2.88.0 to 2.88.2 #38)
• 726108f Fix/#1263 tracetags refresh ([Snyk] Security upgrade @mojaloop/central-services-health from 8.3.0 to 13.0.0 #37)
• 678319f Fix/#1263 encode tracestate missing tracestates on new ([Snyk] Fix for 1 vulnerabilities #36)
• 53735fe Feature/#1263 encode tracestate ([Snyk] Fix for 20 vulnerabilities #35)
• 1e3a873 Fix/other tracestate missing 2 ([Snyk] Fix for 12 vulnerabilities #34)
• 063e50d Fix/other tracestate missing ([Snyk] Security upgrade @mojaloop/central-services-health from 8.3.0 to 13.0.0 #33)
• 7f2a082 Release candidate ([Snyk] Fix for 1 vulnerabilities #31)
• 0cc7b60 Added updated Mojaloop license ([Snyk] Security upgrade hapi-swagger from 11.1.0 to 14.2.5 #29)
• 0f5e7b0 Added updated Mojaloop license ([Snyk] Fix for 1 vulnerabilities #28)
• 2f7d85c - Upgraded to Node 12.16.0 LTS. ([Snyk] Fix for 3 vulnerabilities #27)
• 656e252 Fix/1167 not returning callback ([Snyk] Fix for 3 vulnerabilities #26)
• 936ab7a feature/1104 improve CI/CD ([Snyk] Fix for 2 vulnerabilities #22)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution