[Snyk] Fix for 1 vulnerabilities

[shubhamagiwal]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • carpool-backend/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	461/1000 Why? Recently disclosed, Has a fix available, CVSS 3.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-DEBUG-3227433	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: sails

The new version differs by 250 commits.

• 6e73a65 1.0.0
• 5f1d8b3 1.0.0-49
• 616e4e1 Insist on the latest sails-generate.
• 6ab0a5a 1.0.0-48
• 1e28823 Lifting with --redis now sets @ sailshq/connect-redis and @ sailshq/socket.io-redis.
• 9f29a03 Change approach from what was begun in 520a3c8cac5db1d9698c50efff82e476ec64fca8 so that we maintain the correct package name for the purpose of require().
• 520a3c8 Tolerate '@ sailshq/connect-redis' as session adapter.
• e2813f5 1.0.0-47
• 6768743 Tweak warning message.
• ce95c84 Update comments to reflect that req.setLocale() is fully supported as of Sails v1.0 and beyond.
• 0753a99 Trivial
• 3bdd786 Tweak troubleshooting tips.
• e8f9bee Check dev-dependencies for sails-hook-grunt
• e8493a6 1.0.0-46
• d1b6061 run tests on Node 9
• b3afed7 Fix issue with CSRF black/whitelists and routes containing optional params when the requested URL contains a querystring but NOT the optional param (whew!)
• 663527f Fix test error output
• 69ead96 Revert 35ae3ccba472bf4a8edb8ffd7d579d18391d1ba0 in favor of clarifying some of the wording.
• 35ae3cc Experiment with customizable www path
• a89d7a4 extrapolate www path
• a2a0789 Tolerate sails-hook-grunt specified in devDependencies when running sails www
• 0b42c59 Don't attempt to create a Redis connection if "client" is provided.
• 1700788 Update LICENSE.md
• 9c532dc Merge pull request #4267 from luislobo/patch-3

See the full diff

Package name: sequelize

The new version differs by 250 commits.

• 0a9b8a6 5.1.0
• 6d84ced docs: fix styling issue with long comments
• cf5aeea chore: v5 release (#10544)
• 1275de0 docs: remove extra entries
• d6d9d81 5.0.0-beta.17
• bc6c133 docs: v5.0.0-beta.17
• 4478d74 chore: strict linting for code and jsdocs (#10535)
• f862e6b fix(util): improve performance of classToInvokable (#10534)
• a26193a chore: enforce stricter linting (#10532)
• 786b19b fix(build): default null for multiple primary keys
• ae7d4b9 feat: expose Sequelize.BaseError
• e03a537 fix(tests): missing clock instance
• d7241f7 fix(tests): path for instance tests
• 69b85c3 refactor: instance tests
• 0c68590 feat(sqlite/query-generator): support restart identity for truncate-table (#10522)
• 3cd3891 refactor(data-types): move to classes (#10495)
• 1b4a7bf fix(association): use minimal select for hasAssociation (#10529)
• 7ccbb1e fix(query-interface): reject with error for describeTable (#10528)
• 454cf48 fix(model): throw for invalid include type (#10527)
• 0b5aa71 fix(types): allow specifying additional options for db.query and add missing retry (#10512)
• 45648dd docs(legacy): fix N:M example (#10509)
• 10c34e3 fix(query): don't prepare options & sql for every retry (#10498)
• e5c0d78 feat: upgrade to tedious@6.0.0 (#10494)
• e0fe772 build: update dependencies

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)