[Snyk] Upgrade source-map-explorer from 2.4.2 to 2.5.3

[mohammed-ibra]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade source-map-explorer from 2.4.2 to 2.5.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released 2 years ago, on 2022-09-26.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Remote Code Execution (RCE) SNYK-JS-EJS-2803307	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Command Injection SNYK-JS-LODASH-1040724	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-Y18N-1021887	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Arbitrary Code Injection SNYK-JS-EJS-1049328	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: source-map-explorer

• 2.5.3 - 2022-09-26
  
  • Bump versions on a few dependencies to support Node 18. See #232. Thanks @ duhdugg!
• 2.5.2 - 2021-01-08
  

  🐛 Bug fixes

  • #197 Does not support Windows path separator. Thanks to @ orokanasaru for the contribution!

  🔧 Internal

  • Update dependencies
• 2.5.1 - 2020-11-28
  

  🔧 Internal

  • Update dependencies
• 2.5.0 - 2020-08-21
  

  🚀 Enhancements

  • #186 Improve performance of HTML generator. Thanks to @ khanguy00 for the contribution!
• 2.4.2 - 2020-03-30
  

  🐛 Bug fixes

  • #174 Failure should result in non-zero exit code.

  🚀 Enhancements

  • #181 Add option to disable border checks. Add --no-border-checks/noBorderChecks flag/option to disable invalid mapping column/line checks. This can be useful when we cannot handle a false-positive case

from source-map-explorer GitHub release notes

Commit messages

Package name: source-map-explorer

• a08e704 Version bump
• 4ea18e5 Bump lodash from 4.17.20 to 4.17.21 ([Snyk] Upgrade preact from 10.2.1 to 10.8.0 #205)
• 07fbd42 Bump ejs from 3.1.5 to 3.1.7 ([Snyk] Upgrade puppeteer from 5.2.1 to 5.5.0 #226)
• 073e029 Bump shell-quote from 1.6.1 to 1.7.3 ([Snyk] Upgrade puppeteer from 5.2.1 to 5.5.0 #228)
• 2a79ecc Bump elliptic from 6.5.3 to 6.5.4 ([Snyk] Upgrade dompurify from 2.2.6 to 2.3.8 #200)
• 0622994 Update source-map dependency ([Snyk] Upgrade puppeteer from 5.2.1 to 5.5.0 #232)
• 0de5602 Update dependencies
• 871b272 Support Windows path separator ([Snyk] Upgrade codemirror from 5.15.2 to 5.65.5 #198)
• e259470 Increase performance test threshold
• c6de712 Update dependencies
• 38497b9 Bump version 2.5.0
• acf7b07 Bump version 2.5.0
• 2242ec3 Improve performance of HTML generator ([Snyk] Upgrade puppeteer from 5.2.1 to 5.5.0 #186)
• 6bc62d2 Update dependencies
• 1dbc03e Improve performance of HTML generator ([Snyk] Upgrade puppeteer from 5.2.1 to 5.5.0 #186)
• 7321483 Update generate-data/src/big dependencies
• 2b22820 Reorganize files
• 1444308 Mova Mocha config files inside `tests` directory
• 2a5a7bd Update contribution notes
• 9cb6f8d Add `sme` as alias to `source-map-explorer`
• 76f25ff Update dependencies
• d3eafd9 Add Node.js 14 to build matrix
• b3c05a7 Update dependencies

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs