[Snyk] Fix for 4 vulnerabilities

[baby636]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • src/lib/ngImgCrop/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASHTEMPLATE-1088054	Yes	Proof of Concept
	704/1000 Why? Has a fix available, CVSS 9.8	Arbitrary Code Injection SNYK-JS-OPEN-174041	Yes	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-TRIMNEWLINES-1298042	Yes	No Known Exploit
	741/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.4	Arbitrary Command Injection npm:open:20180512	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gulp-concat-util

The new version differs by 5 commits.

• 397ac81 chore(release): cut the v0.4.0 release
• 759d721 feat(scripts): add scripts concat
• 4e39c55 feat(concat): add sourcemaps support
• 7793173 chore(release): cut the v0.3.0 release
• 8cf7d0f feat(concat): add rename-like function support for naming

See the full diff

Package name: gulp-util

The new version differs by 84 commits.

• 28c2aa2 3.0.8
• 1034a68 Upgrade: bump dateformat, per https://github.com/removes CLI felixge/node-dateformat#53#issuecomment-245782776 ([Snyk] Fix for 1 vulnerabilities #130)
• 5a417cf Merge pull request [Snyk] Security upgrade mocha from 3.5.3 to 10.1.0 #125 from jmeas/patch-1
• 8cdbc07 Remove gutil.beep() from README example
• b74a5ff 3.0.7
• 5c0c5cf bump logger versions
• 3879b24 Merge pull request [Snyk] Security upgrade gulp-livereload from 2.1.1 to 3.8.1 #106 from stevelacy/patch-1
• 7bba70f Update package repo link
• 194248a Merge pull request [Snyk] Security upgrade grunt-contrib-connect from 0.8.0 to 0.11.0 #105 from gulpjs/gulplog
• 65c210a add branching logic to support new gulplog stuff
• 4656163 Merge pull request [Snyk] Security upgrade nyc from 11.9.0 to 14.0.0 #100 from makky3939/clean_up_template_js
• 878c95b fix
• 385b059 more readable
• 7e1336e 3.0.6
• 64325ae Merge pull request [Snyk] Security upgrade gulp from 3.9.1 to 4.0.0 #99 from TrySound/master
• 5755bb3 Updated dependencies
• 1c96495 Merge pull request [Snyk] Security upgrade grunt from 0.4.5 to 1.5.3 #97 from arthurvr/patch-1
• de9c310 Update node version in readme
• d9ac713 3.0.5
• 5155266 Merge pull request [Snyk] Security upgrade grunt from 0.4.5 to 1.5.3 #94 from pgilad/patch-1
• d666893 update license attribute
• 81a61ce Merge pull request [Snyk] Security upgrade grunt from 0.4.5 to 1.5.3 #92 from stringparser/fix-log-formatting
• c107206 missing quotes on previous test and space for object in current
• 0c4f90f fix tests logging

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Command Injection
🦉 Denial of Service (DoS)