[Snyk] Fix for 1 vulnerabilities

[snyk-levine]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • large-file/package.json
  • large-file/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	718/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: jsdom

The new version differs by 250 commits.

• 2d82763 Version 16.5.0
• 9741311 Fix loading of subresources with Unicode filenames
• 5e46553 Use domenic's ESLint config as the base
• 19b35da Fix the URL of about:blank iframes
• 017568e Support inputType on InputEvent
• 29f4fdf Upgrade dependencies
• e2f7639 Refactor create‑event‑accessor.js to remove code duplication
• ff69a75 Convert JSDOM to use callback functions
• 19df6bc Update links in contributing guidelines
• 1e34ff5 Test triage
• 1d6cb3c XHR: clear response buffer on errors
• 1e86b2e XHR: mark Content-Length as CORS-safelisted
• 6a8f012 XHR: avoid a redundant final progress event
• 021555b Allow mutating disabled <input type=checkbox/radio>
• a62d9fe Remove ondragexit from GlobalEventHandlers
• 745fbaf Call mutation observer callbacks with the MutationObserver as this
• 6c758c9 Implement window.event
• a88d0bf Clean up navigator.plugins and navigator.mimeTypes
• 31eb938 Implement queueMicrotask()
• 2ab99ad Stop replacing / with : in the File constructor
• ffd4aa3 Reduce log spam when starting WPT server
• e0de8be Upgrade to-upstream WPTs to Python 3
• c94ceeb Automatically omit all testdriver tests
• b3f6056 Update WPT

See the full diff

Package name: tough-cookie

The new version differs by 173 commits.

• 4ff4d29 4.1.3 release preparation, update the package and lib/version to 4.1.3. ([Snyk-local(Unlimited)] Upgrade lodash from 4.17.10 to 4.17.11 snyk-fixtures/npm-lockfiles#284)
• 12d4747 Prevent prototype pollution in cookie memstore ([Snyk-local(Unlimited)] Upgrade color-convert from 1.9.2 to 1.9.3 snyk-fixtures/npm-lockfiles#283)
• f06b72d Fix documentation for store.findCookies, missing allowSpecialUseDomain property ([Snyk] Security upgrade express from 4.16.3 to 4.21.1 #257)
• b1a8898 fix: allow set cookies with localhost ([Snyk] Security upgrade express from 4.12.4 to 4.20.0 #253)
• ec70796 4.1.1 Patch -- allow special use domains by default ([Snyk] Fix for 4 vulnerabilities #250)
• d4ac580 fix: allow special use domains by default ([Snyk] Security upgrade body-parser from 1.9.0 to 1.20.3 #249)
• 79c2f7d 4.1.0 release to NPM ([Snyk] Security upgrade tap from 5.8.0 to 18.0.0 #245)
• 4fafc17 Prepare tough-cookie 4.1 for publishing (updated GitHub actions, move Dockerfile version to Node:16) ([Snyk] Fix for 20 vulnerabilities #242)
• aa4396d fix: distinguish between no samesite and samesite=none ([Snyk] Security upgrade tap from 5.8.0 to 18.0.0 #240)
• b8d7511 Modernize README ([Snyk] Security upgrade tap from 5.8.0 to 12.0.2 #234)
• 8088047 Merge pull request [Snyk] Security upgrade tap from 5.8.0 to 12.0.2 #238 from gboer/fix/actually-use-punycode-package
• 9a12cb0 Stop using the internal NodeJS punycode module, and instead use the punycode package (also because the internal punycode NodeJS module is deprecated)
• 9b10131 Merge pull request [Snyk] Security upgrade elliptic from 6.5.3 to 6.5.7 #236 from salesforce/fix/235_domain_matching
• 35b7a13 fix: domain match routine
• 30246e6 Adding Updating CODEOWNERS with ECCN as per Export Control Compliance ([Snyk] Fix for 1 vulnerabilities #223)
• 2921fbd Merge pull request [Snyk] Security upgrade tap from 5.8.0 to 6.3.0 #227 from colincasey/bugfix/222_react_native_support
• 8ef9e80 Merge branch 'master' into bugfix/222_react_native_support
• dd96218 fix: upgrade universalify from 0.1.2 to 0.2.0 ([Snyk] Fix for 1 vulnerabilities #228)
• 0ef85bb Update test/node_util_fallback_test.js
• a312304 Merge branch 'master' into bugfix/222_react_native_support
• 733f5c5 Update node_util_fallback_test.js
• d079268 Unit test cases for `allowSpecialUseDomain` option ([Snyk] Fix for 1 vulnerabilities #225)
• cca932a Support for React Native
• 59a1b3d Support for React Native

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution