[Snyk] Fix for 16 vulnerabilities

[baby636]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/ipfs-daemon/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution SNYK-JS-DOTPROP-543489	Yes	Proof of Concept
	484/1000 Why? Has a fix available, CVSS 5.4	Open Redirect SNYK-JS-GOT-2932019	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-HTTPCACHESEMANTICS-3248783	Yes	Proof of Concept
	579/1000 Why? Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-JUSTSAFESET-1920917	No	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-LIBP2P-3164757	No	No Known Exploit
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASHTEMPLATE-1088054	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Open Redirect SNYK-JS-NODEFORGE-2330875	No	Proof of Concept
	529/1000 Why? Has a fix available, CVSS 6.3	Prototype Pollution SNYK-JS-NODEFORGE-2331908	No	No Known Exploit
	494/1000 Why? Has a fix available, CVSS 5.6	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430337	No	No Known Exploit
	579/1000 Why? Has a fix available, CVSS 7.3	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430339	No	No Known Exploit
	494/1000 Why? Has a fix available, CVSS 5.6	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430341	No	No Known Exploit
	536/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 4.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1047770	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1584358	Yes	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1585624	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-2824151	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-TRIMNEWLINES-1298042	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: aegir

The new version differs by 116 commits.

• 5d448e7 chore(release): 37.0.0 [skip ci]
• bc62524 chore: add missing dep
• e3a4b45 feat: update build and release commands ([Snyk] Security upgrade ipfs from 0.55.4 to 0.66.1 #946)
• 585b004 chore(release): 36.2.3 [skip ci]
• a4123d5 chore(deps): bump simple-git from 2.37.0 to 3.3.0 ([Snyk] Security upgrade ipfs from 0.55.4 to 0.66.1 #944)
• 045ee8a chore(release): 36.2.2 [skip ci]
• cdd0ad1 chore: fix linting
• 677efd7 chore: slow ci is slow
• 2f88c95 fix: restore typesversions for ts config file
• 512e594 chore(release): 36.2.1 [skip ci]
• d03bb03 fix: types for test utils
• 539f597 fix: update config
• a849765 fix: publish utils dir
• 9b45b4b chore(release): 36.2.0 [skip ci]
• 3defb4f chore: add auto-release
• 3fec2e3 chore: remove unused dep
• dcb5be6 chore: add path dep
• feeeb54 fix: tsc receives forward args ([Snyk] Fix for 1 vulnerabilities #939)
• d3dc7cd fix: cache types dir
• 6136719 chore: add install browser deps action
• d8111a2 fix: remove playwright
• 7f83b6c fix: run playwright install-deps
• 40a49f6 fix: cache playwright browsers
• ad2f33b chore: change if clause

See the full diff

Package name: ipfs-core

The new version differs by 250 commits.

• 89aeaf8 chore: release master (chore: release master ipfs/js-ipfs#4189)
• 051da16 deps: update libp2p to 0.39.0 (deps: update libp2p to 0.39.0 ipfs/js-ipfs#4203)
• bb78ebf deps: upgrade @ multiformats/multiaddr to 10.4.0 (deps: upgrade @multiformats/multiaddr to 10.4.0 ipfs/js-ipfs#4178)
• 83f9882 fix: query input types (fix: query input types ipfs/js-ipfs#4201)
• c6d03ec docs: clarify state of DHT in js-ipfs (docs: clarify state of DHT in js-ipfs ipfs/js-ipfs#4181)
• cb3533a docs: Update README.md (docs: Update README.md ipfs/js-ipfs#4192)
• 8f351a8 chore: linting
• 39dbf70 deps!: update to libp2p@0.38.x (deps!: update to libp2p@0.38.x ipfs/js-ipfs#4151)
• 7a7e091 chore: update docs/core-api/README (chore: update docs/core-api/README ipfs/js-ipfs#4159)
• 3b25957 chore: houseclean README (chore: houseclean README ipfs/js-ipfs#4157)
• e14dab8 chore: Update .github/workflows/stale.yml [skip ci]
• 3e7353f chore: houseclean ipfs/README (chore: houseclean ipfs/README ipfs/js-ipfs#4156)
• 89db371 chore: houseclean interface-ipfs-core/README (chore: houseclean interface-ipfs-core/README ipfs/js-ipfs#4158)
• a05695f chore: houseclean ipfs-core/README (chore: houseclean ipfs-core/README.md ipfs/js-ipfs#4160)
• d5c1a54 Update .github/workflows/stale.yml
• 965f5a4 chore: release master (chore: release master ipfs/js-ipfs#4146)
• 00bd3dd fix: make pubsub message types consistent (fix: make pubsub message types consistent ipfs/js-ipfs#4145)
• c1cbc81 chore: update changelogs (chore: update changelogs ipfs/js-ipfs#4144)
• 5a9039a chore: release master (chore: release master ipfs/js-ipfs#4143)
• 7be50bd fix: use default ws filters instead of connecting to everything (fix: use default ws filters instead of connecting to everything ipfs/js-ipfs#4142)
• 0078aad chore: release master (chore: release master ipfs/js-ipfs#4132)
• 70e142a chore: cleanup changelog (chore: cleanup changelog ipfs/js-ipfs#4129)
• 129ac77 fix: onMessage assignment should be undefined not null (fix: onMessage assignment should be undefined not null ipfs/js-ipfs#4131)
• 92155bc Add .github/workflows/stale.yml

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Open Redirect
🦉 Regular Expression Denial of Service (ReDoS)