[Snyk] Fix for 2 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-GRPC-598671	Yes	Proof of Concept
	475/1000 Why? Has a fix available, CVSS 5	Prototype Pollution SNYK-JS-HAPIHOEK-548452	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @mojaloop/central-ledger

The new version differs by 38 commits.

• 654d6be Merge branch 'master' of https://github.com/mojaloop/central-ledger
• faf36d6 Added updated Mojaloop license (#604)
• cf8424b Hotfix: resolve audit issues (#599)
• 8d452c8 #1175 - Upgrade to Node 12.16.0 LTS (#596)
• d3976fe #1215: cachingEnhancements - config for disable/enable cache (#587)
• 3d407d0 #602: participant-currency caching - initial implementation (#583)
• 005d30c #602: refactored participant Cache (#576)
• 109ee07 updated eventsdk version (#575)
• 01d7417 version change (#574)
• 8361d5d Merge branch 'master' of https://github.com/mojaloop/central-ledger
• 9718cd3 version change
• e21e6f5 updated dependencies for events and trace (#572)
• 213c549 forgot to run npm install
• 05e2006 updated dependencies for events and trace
• 92fd1d1 602 Active Participants Caching (#566)
• bd3f72c Add anchore summary report upload, bump package version to 8.8.2 (#563)
• 031a97b Feature/602 catbox memory caching (#560)
• 60a1dcb Feature/#37implement authorization endpoints (#500)
• 6100240 Update dependencies. (#532)
• e27bce4 feature/1089 Timeout Handler Enhancement (#515)
• 45eaa4b Remove used dependencies. Add missing depedency (#512)
• 701a652 Merge remote-tracking branch 'mojaloop/master'
• 874ecea Upgraded central-services-stream for #1114KafkaErrorLocalQueuefull fix (#511)
• 514212d Maintenance update (#505)

See the full diff

Package name: @mojaloop/central-services-shared

The new version differs by 92 commits.

• 14f0b3e feat(2151)!: helm-release-v12.1.0 (Bump npm-check-updates from 4.0.4 to 5.0.0 mojaloop/central-settlement#297)
• a5d9141 chore: fix service type typescript enum (Bump tape from 4.13.2 to 5.0.0 mojaloop/central-settlement#296)
• 5aaf087 fix(#2182)!: regex validations against swagger interface spec no longer working (Release/v9.5.0 mojaloop/central-settlement#295)
• 0e538d8 chore: bump package version (release v9.5.0 mojaloop/central-settlement#294)
• fc4fe7e chore: add 'example' as whitelisted keyword (Bump @mojaloop/central-services-shared from 9.3.0 to 9.5.5 mojaloop/central-settlement#293)
• 6f9496d chore: address vulnerabilities (Bump @mojaloop/central-services-shared from 9.3.0 to 9.5.3 mojaloop/central-settlement#291)
• 6275eb0 chore: add services endpoints (Bump npm-check-updates from 4.0.4 to 4.1.2 mojaloop/central-settlement#290)
• 5860510 feat(#2119): fixes for updated for AJV error objects change (Bump @mojaloop/central-services-shared from 9.3.0 to 9.5.2 mojaloop/central-settlement#289)
• b83a8bd fixed typo (Bump nyc from 15.0.0 to 15.0.1 mojaloop/central-settlement#288)
• aee59ed Feature/#2057 refactoring for cs ([Snyk] Fix for 1 vulnerabilities #3) (Bump npm-check-updates from 4.0.4 to 4.1.0 mojaloop/central-settlement#284)
• 082d373 chore: add PATCH consentRequests endpoint (Bump mustache from 4.0.0 to 4.0.1 mojaloop/central-settlement#279)
• 7702879 chore: add enums to interface (Bump standard from 14.3.1 to 14.3.3 mojaloop/central-settlement#278)
• 5dcbe73 chore: add consent and consent request events and patch action (Bump @hapi/joi from 16.1.8 to 17.1.1 mojaloop/central-settlement#277)
• 9f8713f chore: add accounts callback endpoints (Bump @hapi/boom from 9.0.0 to 9.1.0 mojaloop/central-settlement#275)
• 5e49222 chore: add enums and bump package (Fixed Dockerfile to have the correct run command for the new module s… mojaloop/central-settlement#274)
• f6009d7 chore: 1975 update deps (Bump sinon from 9.0.0 to 9.0.1 mojaloop/central-settlement#273)
• f678b43 [Security] Bump axios from 0.21.0 to 0.21.1 (Bump npm-check-updates from 4.0.2 to 4.0.4 mojaloop/central-settlement#269)
• a8bfb9c Bump urijs from 1.19.2 to 1.19.5 (Settlement v2 mojaloop/central-settlement#270)
• 7b00ed8 [Security] Bump urijs from 1.19.2 to 1.19.5 (Feature/1241 get settlements by params to include currency mojaloop/central-settlement#268)
• 46d88e6 #1885: Fix for "multiple servers per repo" use case (Bump @hapi/hapi and hapi-swagger mojaloop/central-settlement#267)
• cbd0434 Hotfix: Fix dependencies for API documentation (Settlement v2 mojaloop/central-settlement#264)
• 327a51c chore: update license file (Bump tape from 4.13.0 to 4.13.2 mojaloop/central-settlement#265)
• df81389 #1885: Add API documentation utility, plugin, and endpoints (Enhance central-settlement : Return settlement window content for every settlement window when getting settlements by id. mojaloop/central-settlement#263)
• 9c88000 Add FSPIOP headers validation for bulk transfers (Bump npm-check-updates from 4.0.2 to 4.0.3 mojaloop/central-settlement#262)

See the full diff

Package name: @now-ims/hapi-now-auth

The new version differs by 2 commits.

• dc778af 2.0.1
• 3dc134a updating core dependencies for security

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic