[Snyk] Fix for 5 vulnerabilities

[yeedster]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • airbyte-webapp/package.json
  • airbyte-webapp/package-lock.json
  • airbyte-webapp/.snyk

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Validation Bypass SNYK-JS-SANITIZEHTML-1070780	No	Proof of Concept
	539/1000 Why? Has a fix available, CVSS 6.5	Access Restriction Bypass SNYK-JS-SANITIZEHTML-1070786	No	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SANITIZEHTML-2957526	No	No Known Exploit
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-YUP-2420835	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: sanitize-html

The new version differs by 96 commits.

• b4682c1 Merge pull request migrate destinations to use airbyte protocol airbytehq/airbyte#557 from apostrophecms/release-2.7.1
• b6c4971 release 2.7.1 (with security fix previously tested and approved by Miro)
• 6683aad remove DoS vulnerability
• 7c7ccb4 credit
• 994f962 Merge pull request move graceful thread shutdown to a helper airbytehq/airbyte#555 from paweljq/fix_protocol_relative_script_tag
• 3c3f075 Merge pull request add transaction support to DatabaseHelper airbytehq/airbyte#556 from cha147/patch-1
• 8e3b00f fix typos in readme
• 329dae7 Fix protocol relative url in scripts tags add java version to gradle airbytehq/airbyte#531
• 3cdc262 release 2.7.0 (bump timeout in spec worker airbytehq/airbyte#534)
• 72989f1 Merge pull request use static generation for json schema to python  airbytehq/airbyte#530 from apostrophecms/zade-credit
• 208cdb4 zade credit
• 7338f8b Merge pull request Add source create/update and destination update endpoints airbytehq/airbyte#529 from zadeviggers/patch-1
• 1971a57 Update defaults in readme
• 43f28f3 Update changelog
• 5fccedb Allow srcset
• be9c90d Add common image attributes
• 379b55b Bumps version (allow scheduling getspec workers airbytehq/airbyte#523)
• da9767f Fixes important stripping (use non-deprecated constructor for PostgreSQLContainer airbytehq/airbyte#522)
• d077c9f Merge pull request Get spec from output of getSpec workers instead of persistence airbytehq/airbyte#521 from alex-rantos/fix-trailing-text
• d905b3b typo on changelog
• 836c5ab add CHANGELOG entry
• c1112fb fix trailing text issue
• d737f39 Bumps version (python source jsonschema support airbytehq/airbyte#520)
• e5027ef Merge pull request use the word catalog instead of schema in javabase airbytehq/airbyte#515 from apostrophecms/revert-505-504-whatwg-url

See the full diff

Package name: yup

The new version differs by 59 commits.

• 31bbfc3 Publish v0.30.0
• d225b5d chore: fix lockfile
• f08d507 fix: defined() so it doesn't mark a schema as nullable
• 57d42a8 fix: uuid's regexp (Flakey Build Failures in CI airbytehq/airbyte#1112)
• 15a0f43 fix: security Fix for Prototype Pollution - huntr.dev (Add more help in Singer Template airbytehq/airbyte#1088)
• 040c40d docs: Clarify return value of mixed.test (Updating Source Settings resets sync frequency to manual airbytehq/airbyte#1089)
• e616039 chore(deps): update all non-major dependencies (Add docs section explaining how to build an airbyte connector from a singer tap  airbytehq/airbyte#1087)
• 7fd80aa fix: IE11 clone() (Put UI loading spinner in the center of the page airbytehq/airbyte#1029)
• 7459544 chore: bump lodash (Fix Job Tracking Issue airbytehq/airbyte#1071)
• 66bb500 chore(deps): update all non-major dependencies (Issue #1016: resolve tag #ref for mailchimp schemas airbytehq/airbyte#1069)
• 6096064 feat: exposes context on mixed.test function and add originalValue to context (Incremental Docs and Data Model Update airbytehq/airbyte#1021)
• a56655d chore(deps): update all non-major dependencies (Recurly airbytehq/airbyte#1058)
• 0dcfa21 chore(deps): update all non-major dependencies (Document Release Story airbytehq/airbyte#1049)
• 7573a1a chore: upgrades property-expr dependency to 2.0.4 (Stream / Field Name Constraints Break Many Sources airbytehq/airbyte#1048)
• a3f94b0 chore(deps): update all non-major dependencies (temporarily remove mssl integrations until we can fix ci build bug airbytehq/airbyte#1044)
• ed49b9e chore(deps): update all non-major dependencies (Auto-detect and migrate new schemas in source DB  airbytehq/airbyte#1037)
• 02f59ad chore(deps): update dependency eslint-plugin-jest to v24 (Speed up getting an integration's spec airbytehq/airbyte#1030)
• a5f55a4 chore(deps): update all non-major dependencies (./gradlew clean build fails  airbytehq/airbyte#1031)
• ce83c0b chore(deps): update all non-major dependencies (Document the recommended resource classes for running Airbyte on AWS and GCP  airbytehq/airbyte#1025)
• 01da7e1 perf: reduce function calls for shallower stacks (Don't return secrets in the API & Only update credentials when requested airbytehq/airbyte#1022)
• dcae108 feat!: remove sync promise implementation and use callbacks internally (User-Defined Comparable airbytehq/airbyte#1019)
• 70e39ef Update issue templates
• f8d5189 chore(deps): update all non-major dependencies (Add Freshdesk source integration airbytehq/airbyte#1014)
• 234b296 chore(deps): update all non-major dependencies (improve error messaging for failed worker runs (discovery, etc) airbytehq/airbyte#1011)

See the full diff

With a Snyk patch:

Severity	Priority Score (*)	Issue	Exploit Maturity
	731/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.2	Prototype Pollution SNYK-JS-LODASH-567746	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution