[Snyk] Fix for 19 vulnerabilities

[baby636]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	619/1000 Why? Has a fix available, CVSS 8.1	Prototype Pollution SNYK-JS-AJV-584908	Yes	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-ASYNC-2441827	Yes	Proof of Concept
	706/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.7	Remote Memory Exposure SNYK-JS-BL-608877	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-INI-1048974	Yes	Proof of Concept
	644/1000 Why? Has a fix available, CVSS 8.6	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	Yes	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	Yes	Proof of Concept
	731/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.2	Prototype Pollution SNYK-JS-LODASH-567746	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	Yes	No Known Exploit
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Prototype Pollution SNYK-JS-MINIMIST-2429795	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Poisoning SNYK-JS-QS-3153490	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-TRIMNEWLINES-1298042	Yes	No Known Exploit
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @svgr/cli

The new version differs by 93 commits.

• af9a6cb v6.0.0
• e9469c3 Merge pull request feat: move files for backwards compatibility ipfs/ipfs-desktop#629 from gregberge/rewriting-docs
• eb3282b docs: rewriting
• 6f832f0 Merge pull request fix: remove api file (fixes a bug when there are unexpected shutdowns) ipfs/ipfs-desktop#627 from gregberge/support-css-variables
• cbdb47f fix: support CSS variables
• 985444d chore: fix package-lock.json
• a5effba v6.0.0-alpha.4
• 3f071d6 Merge pull request fix: remove api file if daemon not running ipfs/ipfs-desktop#626 from gregberge/upgrade-deps
• daf6a08 chore(deps): upgrade
• 1c5f163 Merge pull request Small desktop ipfs/ipfs-desktop#625 from gregberge/icon-size
• 483560d chore: fix package-lock.json
• 3c0b779 feat: allow to specify icon size
• 6ba16a3 Merge pull request fix: upload directory with subdirectories [WIP] ipfs/ipfs-desktop#624 from gregberge/various-things
• f61c8ba chore: fix ref following refactoring
• 261e1b5 v6.0.0-alpha.3
• fe5c117 Merge pull request feat: connect already running daemon ipfs/ipfs-desktop#623 from gregberge/webpack
• 9a4cbce docs(examples): update examples
• 1a8cc98 fix(webpack): fix webpack 5 behaviour with url-loader
• a857bb1 feat: support mask-type property (feat: default profile as dhtclient ipfs/ipfs-desktop#621)
• 5966714 fix(template): make it possible to use type in template (Minimize DHT bandwidth usage: switch node to dhtclient profile ipfs/ipfs-desktop#619)
• 9ea5da4 refactor(core): use exportName transform (Better Error Messages ipfs/ipfs-desktop#616)
• 8a1b0aa docs(readme): Fixing CRA link (Mount MFS ipfs/ipfs-desktop#618)
• 00a1d4b chore: fix package-lock.json
• f729efa v6.0.0-alpha.2

See the full diff

Package name: spectron

The new version differs by 28 commits.

• d2ecadc fix: disable contextIsolation on webframes
• 04f97b5 chore: disable windowByIndex commands
• f60fdbc chore: set fixtures to contentIsolation: false, update deprecation log number
• 86bffe8 chore: upgrade to Electron 12, import @ electron/remote
• f4d097a Merge pull request Self-destructed on auto-update from v0.6.0 to v0.6.1 ipfs/ipfs-desktop#783 from AviVahl/replace-request-with-got
• 87a00b7 v13.0.0
• d515796 test(ci): use github actions Linux container (Add home and removable-media plug to the snap ipfs/ipfs-desktop#782)
• 495f7d8 chore(deps): replace "request" with "got"
• 1510a9b Merge pull request fix: gelocation of peers ipfs/ipfs-desktop#778 from AviVahl/electron-11
• d763b84 chore(deps): electron@11, latest others
• 2bfc7dd Merge pull request Black screenshots - master branch ipfs/ipfs-desktop#772 from andersk/prepare
• 72ed944 Change prepack script to prepare
• fc4c67e Version 12.0.0
• 89206bf chore: upgrade Electron to v10.0.0 (Improve UX when $IPFS_PATH/api exists and API is offline ipfs/ipfs-desktop#713)
• cfeeebe chore: bump standard from 12.0.1 to 14.3.4 (Start addressing the tests ipfs/ipfs-desktop#604)
• 7b8520e chore: bump eslint from 7.3.1 to 7.9.0 (feat: i18n ipfs/ipfs-desktop#706)
• 22ee8ed chore: bump @ typescript-eslint/parser from 3.4.0 to 3.10.1 (fail to build source code  ipfs/ipfs-desktop#690)
• bb2a42c chore: bump @ typescript-eslint/eslint-plugin from 3.4.0 to 4.0.0 (docs: fix spelling ipfs/ipfs-desktop#698)
• 1439291 chore: bump typescript from 3.9.2 to 4.0.3 (fix: do not cleanup api and repo.lock files ipfs/ipfs-desktop#711)
• 1b75bf0 chore: bump webdriverio from 6.1.20 to 6.5.2 (fix: a typo in CORS header name ipfs/ipfs-desktop#712)
• cf6d97c Version 11.1.0
• c4fe27e chore: Add prettier and eslint (Bad UX on pinning big ipfs-pack trees ipfs/ipfs-desktop#633)
• 9fdb353 chore: upgrade webdriverio to 6.1.20 (Hangs on OSX ipfs/ipfs-desktop#631)
• 0e91e2b chore: bump electron from 8.0.0 to 9.0.0 (Option to only start Frontend ipfs/ipfs-desktop#611)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Regular Expression Denial of Service (ReDoS)
🦉 Command Injection