[Snyk] Fix for 14 vulnerabilities

[Clarkcj12]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • webapp/package.json
  • webapp/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	671/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7	Remote Code Execution (RCE) SNYK-JS-HANDLEBARS-1056767	Yes	Proof of Concept
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-HANDLEBARS-1279029	Yes	Proof of Concept
	579/1000 Why? Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-HANDLEBARS-173692	Yes	No Known Exploit
	579/1000 Why? Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-HANDLEBARS-174183	Yes	No Known Exploit
	579/1000 Why? Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-HANDLEBARS-469063	Yes	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-HANDLEBARS-480388	Yes	No Known Exploit
	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Arbitrary Code Execution SNYK-JS-HANDLEBARS-534478	Yes	Proof of Concept
	704/1000 Why? Has a fix available, CVSS 9.8	Prototype Pollution SNYK-JS-HANDLEBARS-534988	Yes	No Known Exploit
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-HANDLEBARS-567742	Yes	Proof of Concept
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Prototype Pollution SNYK-JS-MINIMIST-2429795	Yes	Proof of Concept
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-MINIMIST-559764	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251	Yes	No Known Exploit
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Regular Expression Denial of Service (ReDoS) npm:clean-css:20180306	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) npm:uglify-js:20151024	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: clean-css-brunch

The new version differs by 32 commits.

• 9991b41 Release 3.0.0.
• 0813fc5 Reorganize package.
• a25dbde Merge pull request [Snyk] Security upgrade brunch from 1.7.13 to 2.5.0 #22 from minghz/master
• e3b6269 Reverting mocha version update
• 7926eb1 Shouldn't have commited the lock file
• e25b941 Merge pull request [Snyk] Fix for 36 vulnerabilities #1 from minghz/update_dependencies
• 5dec816 Bump version
• d30e1c7 Fix security vulnerabilities from old dependencies
• 3517524 Release 2.10.0.
• a012b48 Refactor tests ([Snyk] Security upgrade brunch from 1.7.13 to 2.5.0 #21)
• c1728c8 Use eslint-config-brunch ([Snyk] Security upgrade django from 3.2.19 to 4.2.15 #19)
• 0369e48 Use latest Node.js in Travis ([Snyk] Security upgrade django from 3.2.19 to 4.2.16 #20)
• 6e83584 Rewrite examples in CoffeeScript to JS ([Snyk] Security upgrade django from 3.2.19 to 4.2.14 #18)
• 6ef25cf Link to CleanCSS repo API options ([Snyk] Security upgrade zipp from 3.15.0 to 3.19.1 #17)
• 69a58ec Fix Plugins: Replace npm i —save with —save-dev brunch/brunch#1486 ([Snyk] Security upgrade handlebars-brunch from 1.10.1 to 2.10.0 #16)
• d33089b Merge pull request [Snyk] Security upgrade sqlparse from 0.4.4 to 0.5.0 #14 from brunch/eslint2
• 62f5220 Update ESLint to 2.1.0
• 3fc3d30 Add travis.
• d3162c3 Tildify dep versions
• 4ce8f45 Release 2.0.0.
• 622eec7 Merge pull request [Snyk] Security upgrade brunch from 1.7.13 to 2.0.3 #13 from brunch/update-iface-2.0
• 0d56ff1 Update interface to 2.0
• d9fab60 Release 1.8.0
• 82742cd Remove incorrect/unneeded main property

See the full diff

Package name: handlebars-brunch

The new version differs by 26 commits.

• 5e17a43 Release 2.10.0.
• d50b22c Update README.md
• ad6064b Merge pull request #61 from denysdovhan/fix-eslint-errors
• 35a487a Fix ESLint errors and warnings
• fc64faa Use latest Node.js in Travis (#59)
• 50cf9ab Use eslint-config-brunch (#60)
• 615b2f0 Rewrite examples in CoffeeScript to JS (#58)
• 2964cd0 add compileStatic API usage (#57)
• 9146999 remove console.log (#56)
• 082818c Minor code tweaks
• 73cdddf Use promises in tests
• 0cfc2b0 Clean up and add tests for include (#55)
• 70cecc3 Remove extra .extension prop
• 036e121 Fix Plugins: Replace npm i —save with —save-dev brunch/brunch#1486 (#54)
• fe1c4fd Merge pull request #50 from brunch/eslint2
• 879a2d6 Update ESLint to 2.1.0
• 03047ec Add travis.
• 9bf7e07 Release 2.0.1.
• 6f5142b Ignore dist.
• e0855d9 Merge pull request #48 from Florian-R/fix-optimize
• 3ce0d20 Fix compilation in production mode
• 3a52f4a Release 2.0.0.
• c0eeb03 Merge pull request #46 from devel-pa/master
• 2702570 Merge pull request #47 from brunch/update-iface-2.0

See the full diff

Package name: uglify-js-brunch

The new version differs by 25 commits.

• 8c67a01 Release 2.10.0.
• 65a2952 Improve error formatting.
• b6f8312 Release 2.1.1.
• 064c2a8 Downgrade uglify, new version is shitty
• c4bd027 Release 2.1.0.
• db1ae32 Improve tests
• 335fdd2 Fix Travis
• 1e461de Update uglifyjs dependency
• b0673d1 Skemata handles that
• da9a1b9 Fix source maps (#39)
• 2fc0b02 Fix ESLint errors and warnings (#38)
• ba836e8 Fix eslint (IMPORTANT! Security Vulnerability Detected in your Repository jkbrzt/cointrol#37)
• 941b80c Use eslint-config-brunch (#35)
• 67d488b Use latest Node.js in Travis (#34)
• 6bc8c66 README: Rewrite examples in coffee to js (#33)
• 060c641 Fix Plugins: Replace npm i —save with —save-dev brunch/brunch#1486 (Bump debug and brunch in /webapp jkbrzt/cointrol#32)
• 4c7d45e Fix.
• c2e3848 Merge pull request Bump qs and brunch in /webapp jkbrzt/cointrol#30 from brunch/eslint2
• 17d76e6 Update ESLint to 2.1.0
• c2cf8d3 Add travis.
• 6e3a4b2 Release 2.0.1.
• 52b32b2 Update uglify.
• 8edd66b Release 2.0.0.
• 01fb350 Merge pull request Bump django from 1.11.6 to 2.2.24 in /cointrol/conf jkbrzt/cointrol#29 from hellyeahllc/update-iface-2.0

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Remote Code Execution (RCE)
🦉 Prototype Pollution
🦉 Denial of Service (DoS)