[Snyk] Fix for 54 vulnerabilities #1

tharles-freire-heyupcharly · 2024-08-08T19:15:13Z

Snyk has created this PR to fix 54 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue
	Prototype Pollution SNYK-JS-ASYNC-2441827
	Server-Side Request Forgery (SSRF) SNYK-JS-AXIOS-1038255
	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-1579269
	Denial of Service (DoS) SNYK-JS-AXIOS-174505
	Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459
	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857
	Denial of Service (DoS) SNYK-JS-EXPRESSFILEUPLOAD-473997
	Prototype Pollution SNYK-JS-EXPRESSFILEUPLOAD-595969
	Remote Code Execution (RCE) SNYK-JS-HANDLEBARS-1056767
	Prototype Pollution SNYK-JS-HANDLEBARS-1279029
	Prototype Pollution SNYK-JS-HANDLEBARS-173692
	Prototype Pollution SNYK-JS-HANDLEBARS-174183
	Prototype Pollution SNYK-JS-HANDLEBARS-469063
	Denial of Service (DoS) SNYK-JS-HANDLEBARS-480388
	Arbitrary Code Execution SNYK-JS-HANDLEBARS-534478
	Prototype Pollution SNYK-JS-HANDLEBARS-534988
	Prototype Pollution SNYK-JS-HANDLEBARS-567742
	Cross-site Scripting (XSS) SNYK-JS-JQUERY-565129
	Cross-site Scripting (XSS) SNYK-JS-JQUERY-567880
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905
	Code Injection SNYK-JS-LODASH-1040724
	Prototype Pollution SNYK-JS-LODASH-567746
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-174116
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342073
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342082
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-451540
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-584281
	Prototype Pollution SNYK-JS-MINIMIST-2429795
	Prototype Pollution SNYK-JS-MINIMIST-559764
	Directory Traversal SNYK-JS-MOMENT-2440688
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238
	Prototype Pollution SNYK-JS-MONGOOSE-1086688
	Prototype Pollution SNYK-JS-MONGOOSE-2961688
	Information Exposure SNYK-JS-MONGOOSE-472486
	Prototype Pollution SNYK-JS-MONGOOSE-5777721
	Arbitrary Code Injection SNYK-JS-MORGAN-72579
	Prototype Pollution SNYK-JS-MPATH-1577289
	Prototype Pollution SNYK-JS-MQUERY-1050858
	Prototype Pollution SNYK-JS-MQUERY-1089718
	Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905
	Regular Expression Denial of Service (ReDoS) npm:fresh:20170908
	Cross-site Scripting (XSS) npm:marked:20150520
	Cross-site Scripting (XSS) npm:marked:20170112
	Cross-site Scripting (XSS) npm:marked:20170815
	Cross-site Scripting (XSS) npm:marked:20170815-1
	Regular Expression Denial of Service (ReDoS) npm:marked:20170907
	Regular Expression Denial of Service (ReDoS) npm:marked:20180225
	Regular Expression Denial of Service (ReDoS) npm:mime:20170907
	Regular Expression Denial of Service (ReDoS) npm:moment:20170905
	Regular Expression Denial of Service (ReDoS) npm:ms:20151024
	Regular Expression Denial of Service (ReDoS) npm:ms:20170412
	Root Path Disclosure npm:send:20151103
	Open Redirect npm:serve-static:20150113

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has automatically assigned this pull request, set who gets assigned.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
👩‍💻 Set who automatically gets assigned
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Server-Side Request Forgery (SSRF)
🦉 Regular Expression Denial of Service (ReDoS)
🦉 More lessons are available in Snyk Learn