[Snyk] Fix for 5 vulnerabilities

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • node_modules/nise/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Prototype Pollution SNYK-JS-MINIMIST-2429795	Yes	Proof of Concept
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-MINIMIST-559764	Yes	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	Yes	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: jsdom

The new version differs by 188 commits.

• 74a8d1e Version 16.6.0
• f51f2ec Remove the dependency on request
• 2b6d5ae Update dependencies
• b72b33b Disable now-crashing canvas test
• 39b7972 Handle null and undefined thrown as exceptions
• 04f6c13 Add ParentNode.replaceChildren() (#3176)
• e4c4004 Version 16.5.3
• 2f41466 Fix MutationObserver infinite loop bugs (#3173)
• b232f2a Run partially-failing WPTs in the custom-elements directory
• 35e103e Run partially-failing WPTs in the cors directory
• 77b660a Run partially-failing WPTs in the FileAPI directory
• d8a245f Use `InnerHTML` mixin for `innerHTML` definition ([Snyk] Security upgrade jest from 25.5.4 to 27.0.2 #2981)
• bd50bbe Version 16.5.2
• d5cfd69 Fix event handler ObjectEnvironment instantiation
• 93e3d4a Remove vestigial concurrentNodeIterators option-passing
• c92f9c1 Check all associated elements for form validity
• 2202703 Fix failing WPTs calculation
• 21c7671 Upgrade dependencies
• c1b9ea1 Port skipped "test_body_event_handler_inline" to WPT
• a13d854 Use WeakRefs for NodeIterator tracking when supported
• fdf97d8 Fix radio/checkbox to not fire events when disconnected
• 761d8cc Refactor <output>
• b36d418 Make customElements.whenDefined() resolve with the constructor
• c5d13bb Remove a variety of redundant to-port tests

See the full diff

Package name: mochify

The new version differs by 39 commits.

• 5b014bd 8.0.1
• 20f8748 Update transient `ws` dependency through npm audit
• 255aaea Update watchify package to v4.0.0 ([Snyk] Fix for 4 vulnerabilities #226)
• 9a9e1ac Clean up package-lock.json ([Snyk] Fix for 3 vulnerabilities #227)
• 3179da8 Migrate CI to GitHub actions
• d6bcc8b 8.0.0
• 4147ccc Document compatibility for v8.x
• 9655108 Drop node 10 support
• 9a706fe Swallow deprecation notices about window.webkitStorageInfo
• 119d6f0 Update mocaccino, mocha and puppeteer
• e099377 7.1.1
• f715ca8 Add contributor
• 59e4350 Npm update
• 1bc13ff Update readme
• eb70de7 Remove dependency on removed nyc feature
• b039a55 Test with node 16
• cbed336 7.1.0
• 63f4dc5 Update Studio Changes
• 2806265 Document workaround for Apple Silicon
• b23b3bd Workaround PUPPETEER_EXECUTABLE_PATH not being respected
• 1248c7f Upgrade puppeteer to v8
• 1e7c98d Merge pull request [Snyk] Fix for 4 vulnerabilities #218 from mantoni/dependabot/npm_and_yarn/elliptic-6.5.4
• cccf180 Bump elliptic from 6.5.3 to 6.5.4
• 54713a9 7.0.0

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Server-side Request Forgery (SSRF)