[Snyk] Fix for 14 vulnerabilities

[baby636]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/ipfs-grpc-server/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution SNYK-JS-DOTPROP-543489	Yes	Proof of Concept
	484/1000 Why? Has a fix available, CVSS 5.4	Open Redirect SNYK-JS-GOT-2932019	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-HTTPCACHESEMANTICS-3248783	Yes	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASHTEMPLATE-1088054	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Open Redirect SNYK-JS-NODEFORGE-2330875	No	Proof of Concept
	529/1000 Why? Has a fix available, CVSS 6.3	Prototype Pollution SNYK-JS-NODEFORGE-2331908	No	No Known Exploit
	494/1000 Why? Has a fix available, CVSS 5.6	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430337	No	No Known Exploit
	579/1000 Why? Has a fix available, CVSS 7.3	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430339	No	No Known Exploit
	494/1000 Why? Has a fix available, CVSS 5.6	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430341	No	No Known Exploit
	536/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 4.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1047770	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1584358	Yes	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1585624	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-2824151	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-TRIMNEWLINES-1298042	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: aegir

The new version differs by 116 commits.

• 5d448e7 chore(release): 37.0.0 [skip ci]
• bc62524 chore: add missing dep
• e3a4b45 feat: update build and release commands ([Snyk] Security upgrade ipfs from 0.55.4 to 0.66.1 #946)
• 585b004 chore(release): 36.2.3 [skip ci]
• a4123d5 chore(deps): bump simple-git from 2.37.0 to 3.3.0 ([Snyk] Security upgrade ipfs from 0.55.4 to 0.66.1 #944)
• 045ee8a chore(release): 36.2.2 [skip ci]
• cdd0ad1 chore: fix linting
• 677efd7 chore: slow ci is slow
• 2f88c95 fix: restore typesversions for ts config file
• 512e594 chore(release): 36.2.1 [skip ci]
• d03bb03 fix: types for test utils
• 539f597 fix: update config
• a849765 fix: publish utils dir
• 9b45b4b chore(release): 36.2.0 [skip ci]
• 3defb4f chore: add auto-release
• 3fec2e3 chore: remove unused dep
• dcb5be6 chore: add path dep
• feeeb54 fix: tsc receives forward args ([Snyk] Fix for 1 vulnerabilities #939)
• d3dc7cd fix: cache types dir
• 6136719 chore: add install browser deps action
• d8111a2 fix: remove playwright
• 7f83b6c fix: run playwright install-deps
• 40a49f6 fix: cache playwright browsers
• ad2f33b chore: change if clause

See the full diff

Package name: ipfs-core

The new version differs by 74 commits.

• f9099fd chore: publish
• 479e09e fix: use correct datastores (fix: use correct datastores ipfs/js-ipfs#3820)
• 1343708 fix: throw error on missing input to add/addAll (fix: throw error on missing input to add/addAll ipfs/js-ipfs#3818)
• a201a3d chore: update libp2p-noise (chore: update libp2p-noise ipfs/js-ipfs#3819)
• e7d5509 feat: pubsub over gRPC (feat: pubsub over gRPC ipfs/js-ipfs#3813)
• 5ab3ced chore: revert "fix: pin nanoid version" (chore: revert "fix: pin nanoid version" ipfs/js-ipfs#3812)
• 4a8de24 docs: add rpc addr docs (docs: add rpc addr docs ipfs/js-ipfs#3809)
• 7a920d8 fix: detect ed25519 keys in ws test (fix: detect ed25519 keys in ws test ipfs/js-ipfs#3808)
• 5c8da9a fix: pass correct types to libp2p dht methods (fix: pass correct types to libp2p dht methods ipfs/js-ipfs#3806)
• 474523a fix: pin nanoid version (fix: pin nanoid version ipfs/js-ipfs#3807)
• 6a2c710 chore: updated example dependencies
• 7f24131 chore: publish
• 93b81f9 chore: update contributors
• 33fa734 feat: ed25519 keys by default (feat: ed25519 keys by default ipfs/js-ipfs#3693)
• 2886134 chore: upgrade go-ipfs to 0.9.x (chore: upgrade go-ipfs to 0.9.x ipfs/js-ipfs#3805)
• 2f3df7a fix: return rate in/out as number (fix: return rate in/out as number ipfs/js-ipfs#3798)
• 4f532a5 fix: do not write blocks we already have (fix: do not write blocks we already have ipfs/js-ipfs#3801)
• db302d0 chore: revert "chore(deps-dev): bump go-ipfs from 0.8.0 to 0.9.1" (chore: revert "chore(deps-dev): bump go-ipfs from 0.8.0 to 0.9.1" ipfs/js-ipfs#3803)
• 4c7ac57 chore(deps-dev): bump go-ipfs from 0.8.0 to 0.9.1 (chore(deps-dev): bump go-ipfs from 0.8.0 to 0.9.1 ipfs/js-ipfs#3765)
• 746a54c fix: fix up examples (fix: fix up examples ipfs/js-ipfs#3799)
• b7fc9e8 docs: update files.rm example (docs: update files.rm example ipfs/js-ipfs#3797)
• 1ad6001 feat: make ipfs.get output tarballs (feat: make ipfs.get output tarballs ipfs/js-ipfs#3785)
• 79f661e fix: typescript errors (fix: typescript errors ipfs/js-ipfs#3781)
• 7fdba64 docs: update remote pinning docs (docs: update remote pinning docs ipfs/js-ipfs#3786)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Open Redirect
🦉 Regular Expression Denial of Service (ReDoS)