[Snyk] Fix for 26 vulnerabilities

[12btcse1108]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • client/package.json
  • client/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIHTML-1296849	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	No	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-CSSWHAT-1298035	Yes	No Known Exploit
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-EVENTSOURCE-2823375	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	No	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-IMMER-1019369	No	Proof of Concept
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-IMMER-1540542	No	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	No	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LOADERUTILS-3043105	No	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	No	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	No	No Known Exploit
	539/1000 Why? Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-NODEFETCH-2342118	No	No Known Exploit
	520/1000 Why? Has a fix available, CVSS 5.9	Denial of Service SNYK-JS-NODEFETCH-674311	No	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Open Redirect SNYK-JS-NODEFORGE-2330875	Yes	Proof of Concept
	529/1000 Why? Has a fix available, CVSS 6.3	Prototype Pollution SNYK-JS-NODEFORGE-2331908	Yes	No Known Exploit
	494/1000 Why? Has a fix available, CVSS 5.6	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430337	Yes	No Known Exploit
	579/1000 Why? Has a fix available, CVSS 7.3	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430339	Yes	No Known Exploit
	494/1000 Why? Has a fix available, CVSS 5.6	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430341	Yes	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-NTHCHECK-1586032	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Authorization Bypass Through User-Controlled Key SNYK-JS-PARSEPATH-2936439	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Improper Input Validation SNYK-JS-POSTCSS-5926692	Yes	No Known Exploit
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Command Injection SNYK-JS-REACTDEVUTILS-1083268	No	Proof of Concept
	619/1000 Why? Has a fix available, CVSS 8.1	Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	No	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-TRIM-1017038	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gatsby

The new version differs by 250 commits.

• 78f8c7a chore(release): Publish
• 4dcdeb1 chore(gatsby): Add env log for build and remove incorrect log for functions (Update forum label to "Leaderboard" freeCodeCamp/freeCodeCamp#36462) (Prepare curriculum for release freeCodeCamp/freeCodeCamp#36466)
• 41de1f0 feat(gatsby): add partial hydration flag (doc: replace medium link with fcc news freeCodeCamp/freeCodeCamp#36436)
• b8c2072 fix(gatsby-source-graphql): add dataLoaderOptions validation to gatsby-source-graphql (Rewrite description freeCodeCamp/freeCodeCamp#36112)
• b45debc chore(docs): fix incorrect closing tag in tutorial (update translation bubble-sort freeCodeCamp/freeCodeCamp#36459)
• 222793d chore(docs): Update plugin count in part 3 of the tutorial (docs: replace Medium with fCC News freeCodeCamp/freeCodeCamp#36455)
• 3222684 chore(docs): Fix page link to page 6 of remark tutorial (docs: add README.japanese.md freeCodeCamp/freeCodeCamp#36437)
• 0b458e6 chore(docs): Fix some typos (Adding new challenges freeCodeCamp/freeCodeCamp#36431)
• 1bf2358 fix(gatsby): remove resource query from warnings (fix(curriculum): Remove additional unnecessary assert message argument from English challenges JavaScript Algorithms and Data Structures freeCodeCamp/freeCodeCamp#36439)
• 0d896ae chore(gatsby-plugin-sharp,gatsby-plugin-utils,gatsby-remark-images,gatsby-transformer-sharp): bump min potrace version (add the text "progrqam" to this article freeCodeCamp/freeCodeCamp#36443)
• a21510e docs: plugin image / image cdn (update translation binary-search freeCodeCamp/freeCodeCamp#36423)
• 8043d7e feat(docs): add webiny to headless cms list (update translation greedy-algorithms freeCodeCamp/freeCodeCamp#36388)
• 240dfac chore: update using-image-processing example (fix(curriculum): Remove unnecessary assert message argument from English Coding Interview Prep challenges - Project Euler - 07 freeCodeCamp/freeCodeCamp#36421)
• b361081 chore(gatsby): drop eslint-plugin-graphql (update translation breadth-first-search freeCodeCamp/freeCodeCamp#36364)
• 2e67161 chore(docs): Update tutorial to Head API (Get JSON with the JavaScript XMLHttpRequest Method - Test seems arbitrary freeCodeCamp/freeCodeCamp#36378)
• 77190f4 fix(deps): update starters and examples - gatsby (fix(curriculum): Remove unnecessary assert message argument from English Coding Interview Prep challenges - Project Euler - 02 freeCodeCamp/freeCodeCamp#36416)
• c92404b chore(changelogs): update changelogs (fix(curriculum): Remove unnecessary assert message argument from English Coding Interview Prep challenges - Project Euler - 03 freeCodeCamp/freeCodeCamp#36417)
• b7b3577 fix(gatsby-plugin-react-helmet): Typo in `onPreInit` warning (fix(curriculum): Remove unnecessary assert message argument from English Coding Interview Prep challenges - Project Euler - 05 freeCodeCamp/freeCodeCamp#36419)
• 7b3286c chore(docs): Add note about query name to MDX
• dc283d7 chore: Use GCS for pipeline tests (fix : add URL to a missing link freeCodeCamp/freeCodeCamp#36413)
• 3760a0e feat(gatsby): Add option to emit TS types during build (fix(curriculum): Remove unnecessary assert message argument from English Responsive Web Design challenges - 01 freeCodeCamp/freeCodeCamp#36405)
• c01806e chore(release): Publish next
• a05201e fix(gatsby): Prevent errors if `Head` has root text node (fix(curriculum): Remove unnecessary assert message argument from English challenges JavaScript Algorithms and Data Structures - 02 freeCodeCamp/freeCodeCamp#36402)
• 9d737b6 fix(gatsby): close parcel cache db before clearing cache and retrying (Remove global flag from the regex in solution of No Repeats Please problem freeCodeCamp/freeCodeCamp#36377)

See the full diff

Package name: gatsby-cli

The new version differs by 250 commits.

• 8d07242 chore(release): Publish
• 0790895 chore(gatsby): Update README (Agile/index.md - correct spelling of "Português" freeCodeCamp/freeCodeCamp#33615)
• 06760d7 chore(gatsby): Change comment format in actions/public (Full translation freeCodeCamp/freeCodeCamp#33592)
• 7d66a23 feat(gatsby): capture number of ssg,dsg,ssr pages in telemetry (Production freeCodeCamp/freeCodeCamp#33337)
• 98a843c fix(gatsby): use lmdb.removeSync so getNode can't return deleted nodes (my change freeCodeCamp/freeCodeCamp#33554)
• 4d8e40b fix(gatsby-source-wordpress): Add steps for `refetch_ALL` (Added links to each CSS framework and updated index.md freeCodeCamp/freeCodeCamp#33264)
• 4761dc3 fix(gatsby): restore onPreBuild to being called right after bootstrap finishes (Add WebAIM Color Contrast Checker freeCodeCamp/freeCodeCamp#33591)
• 1cdbab6 fix(deps): update starters and examples gatsby packages to ^3.14.3 (UX reasons for dropdowns freeCodeCamp/freeCodeCamp#33553)
• 0f421db chore(release): Publish next
• 7d6a0aa fix(gatsby): fix page-tree in ink-cli (Update the full form of gcc freeCodeCamp/freeCodeCamp#33579)
• 3993819 chore(gatsby): Add `assetPrefix` to `IGatsbyConfig` (Improved readability freeCodeCamp/freeCodeCamp#33575)
• 6cc964a fix(gatsby-source-wordpress): restore PQR support (Corrected the order of words freeCodeCamp/freeCodeCamp#33590)
• 9eef270 specifying what actually changed (fixed spelling errors freeCodeCamp/freeCodeCamp#33452)
• 2975c4d feat(gatsby,gatsby-link): add queue to prefetch (Correcting grammatical errors freeCodeCamp/freeCodeCamp#33530)
• 68fe836 fix(gatsby): temporary workaround for stale jobs cache (Fixing inline code indentation CSS Coments freeCodeCamp/freeCodeCamp#33586)
• a800d9d fix(gatsby): Update internal usage of .runQuery (Add Accessible Header Example freeCodeCamp/freeCodeCamp#33571)
• 677760c chore(docs): Clarify SEO component guide (Update index.md freeCodeCamp/freeCodeCamp#33451)
• ccca4b3 fix(gatsby): only remove unused code when apis got removed (Added words "my changes" to the article freeCodeCamp/freeCodeCamp#33527)
• 8dbf550 fix(gatsby): assign correct parentSpans to PQR activities (Ant Colony Optimization freeCodeCamp/freeCodeCamp#33568)
• 31d5a5e fix(gatsby-dev-cli): resolve correct versions of packages with unpkg (Added CPU relationship diagram. freeCodeCamp/freeCodeCamp#33551)
• 5110074 fix(gatsby-plugin-gatsby-cloud): emit file nodes after source updates (order point included freeCodeCamp/freeCodeCamp#33548)
• d2329df fix(gatsby): make sure 404 and 500 page inherit stateful status from original page (Update add-columns-with-grid-template-columns.english.md (Wording order) freeCodeCamp/freeCodeCamp#33544)
• 68e5b90 chore(docs): Update query var in part-7 tutorial (Improve Russian translation of Python pow guide freeCodeCamp/freeCodeCamp#33559)
• a8cab55 chore(gatsby-plugin-react-helmet): Update Examples (Introduction to Design Patterns freeCodeCamp/freeCodeCamp#33552)

See the full diff

Package name: gatsby-plugin-postcss

The new version differs by 250 commits.

• bdd723e chore(release): Publish
• 00f7c08 breaking(gatsby-plugin-postcss): Upgrade gatsby-plugin-postcss to PostCSS 8 (added a link "Future of crytocurrency" freeCodeCamp/freeCodeCamp#26947)
• 57c79b1 chore(release): Publish
• c377aef chore: Fix dirty lock file (Fixing spelling errors freeCodeCamp/freeCodeCamp#27200)
• def8b37 Add siteHash and userAgent (added additional bootstrap resources freeCodeCamp/freeCodeCamp#27170)
• f1d45d4 Try detecting codesandbox and mark it as CI (Added media information freeCodeCamp/freeCodeCamp#26958)
• 710667f chore(deps): update dependency csstype to v2.6.13 (Error: while running on npm run develop  freeCodeCamp/freeCodeCamp#27083)
• 668858f chore(deps): update minor and patch for gatsby-remark-copy-linked-files (Explain Variables in Sass freeCodeCamp/freeCodeCamp#27112)
• b74ffaf chore(deps): update minor and patch for gatsby-remark-prismjs (Added installation guide for Anugular 2.x and greater. freeCodeCamp/freeCodeCamp#27113)
• a4cf33b chore(deps): update dependency @ types/fs-extra to ^8.1.1 (Challenge - ES6: Write Concise Declarative Functions with ES6 - Added solution freeCodeCamp/freeCodeCamp#27072)
• fcdedc0 chore(deps): update better-opn (Update index.md, added feature set freeCodeCamp/freeCodeCamp#27100)
• e085f63 chore(deps): update dependency @ types/lodash to ^4.14.161 (Minor text fix freeCodeCamp/freeCodeCamp#27074)
• 8d89796 chore(renovate): Fix typo
• aad6551 chore: update schedule renovatebot (corrected mistranslation freeCodeCamp/freeCodeCamp#27175)
• 73dd4be chore(docs): Update gatsby-plugin-guess-js README (translation freeCodeCamp/freeCodeCamp#25876)
• 10dfe01 fix(blog): July gazette: brand names, files in code fences.... (Updated index.md added acceptance criteria freeCodeCamp/freeCodeCamp#26228)
• 152b524 Fix(gatsby-plugin-catch-links): SVGAnimatedString may not be available in some browsers. (Added ` symbol freeCodeCamp/freeCodeCamp#26047)
• bfd46f8 fix(gatsby-source-contentful): Add file-extension to remote cached items (Improved readability of 'Description' freeCodeCamp/freeCodeCamp#25924)
• 78abe26 fix(gatsby-telemetry): export typescript types, add captureEvent (add w3c article, correct html tag translation freeCodeCamp/freeCodeCamp#27167)
• 79d70be Add siteName to ITelemetryTagsPayload (Update index.md freeCodeCamp/freeCodeCamp#27169)
• 8d62b2c fix(gatsby): retry socket when connection closes (Fixed mistakenly translated CSS example freeCodeCamp/freeCodeCamp#27060)
• 4e7ab0e chore(deps): update dependency @ types/node-fetch to ^2.5.7 (presentation change  freeCodeCamp/freeCodeCamp#27076)
• 96e3935 chore(deps): update dependency @ types/got to ^9.6.11 (Fix typos for Docker separate build image freeCodeCamp/freeCodeCamp#27073)
• e4a37a4 tests: run CircleCI tests when only yarn.lock changes (Added comment on over-commenting freeCodeCamp/freeCodeCamp#27162)

See the full diff

Package name: gatsby-transformer-remark

The new version differs by 250 commits.

• e98cb62 chore(release): Publish
• 164f9a1 fix(gatsby-source-contentful): De-dupe type names (Arch Linux installation freeCodeCamp/freeCodeCamp#30834) (Portuguese translation and corrections freeCodeCamp/freeCodeCamp#30850)
• 0b99d00 fix(gatsby): webpack warnings are no longer in object format by default (Added methods to go to beginning and end of line freeCodeCamp/freeCodeCamp#30801) (Usage of Throw and Throws keywords in exception handling. freeCodeCamp/freeCodeCamp#30853)
• f561724 fix(gatsby): lower memory pressure in SSR (removed redundant sentence fragment freeCodeCamp/freeCodeCamp#30793) (Updating readme.md file freeCodeCamp/freeCodeCamp#30851)
• 96805d5 fix(gatsby-source-wordpress): change `console.warning` to `console.warn` (Added punctuation mark to README.md freeCodeCamp/freeCodeCamp#30764) (Added topcoder tutorial links freeCodeCamp/freeCodeCamp#30852)
• e40c83d chore(release): Publish next
• a5b5cf8 feat: upgrade to remark 13 (Altered grammar of "Case Cooling" section freeCodeCamp/freeCodeCamp#29678)
• 172cf4d chore(docs): Add link to perf implications siteContext (Created new section with link to bulma website freeCodeCamp/freeCodeCamp#30778)
• 4336d04 fix(gatsby-plugin-gatsby-cloud): Add missing index.js (so the plugin can be resolved in workspaces) (Add guidelines for "Make Typography Responsive" chapter freeCodeCamp/freeCodeCamp#30761)
• 2bdd5a5 fix(gatsby-source-wordpress): only log out duplicate node if we have all the data we want to log (added "##" freeCodeCamp/freeCodeCamp#30751)
• 1a9b830 fix(gatsby-plugin-image): Don't inherit all img styles (Added "the" to line 17 and comma to line 33 freeCodeCamp/freeCodeCamp#30754)
• e0df4cc chore(docs): Change "whitelist" to "allow list" (Fixed typo on line 27 freeCodeCamp/freeCodeCamp#30756)
• 81ec270 chore: Add backport script (Added bug bounty links freeCodeCamp/freeCodeCamp#30732)
• 63cc8fa fix(docs): Copy edits for debugging html doc + add React-specific example (Update README.md freeCodeCamp/freeCodeCamp#30745)
• eed1d43 fix(docs): Add link to how to enable DEV_SSR for fixing inconsistent css styles between dev/prod (Added a conference website freeCodeCamp/freeCodeCamp#30746)
• ecd823f perf(gatsby): cache babel config items (Add href statement to hide link address freeCodeCamp/freeCodeCamp#28738)
• a60e92f chore(release): Publish next
• dd9e95c docs(gatsby-plugin-image): Note on tracedSVG options name change (updated. freeCodeCamp/freeCodeCamp#30736)
• a5869e3 fix(gatsby-plugin-image): Use bare GATSBY___IMAGE global (he traducido la etiqueta h1 y p al español freeCodeCamp/freeCodeCamp#30713)
• 0f3fa4e fix(contentful): make gatsby-plugin-image a peer dependency (CI: Optimize the tests performance. freeCodeCamp/freeCodeCamp#30709)
• 6b2fd94 fix(gatsby-source-wordpress): pass missing property helpers to gql fetch util ([german] Translation of style-guide-for-guide-articles.md freeCodeCamp/freeCodeCamp#30727)
• c6fa488 chore(docs): Update wording of tutorial part 8 (Refined the explanation of pointers & their syntax freeCodeCamp/freeCodeCamp#30606)
• a777367 fix(gatsby-cli): Update docs links in error-map (Adding alternative tools for coding style freeCodeCamp/freeCodeCamp#30493)
• c473abf chore(docs): include autoprefixer in tailwind install command (Added info about array value addressing freeCodeCamp/freeCodeCamp#30718)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution
🦉 Open Redirect
🦉 More lessons are available in Snyk Learn