[Snyk] Fix for 8 vulnerabilities

[snyksec]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change
	Denial of Service (DoS) SNYK-JS-EXPRESSFILEUPLOAD-473997	Yes
	Denial of Service (DoS) SNYK-JS-JSYAML-173999	Yes
	Prototype Pollution SNYK-JS-LODASH-450202	No
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-451540	No
	Denial of Service (DoS) SNYK-JS-MONGODB-473855	Yes
	Information Exposure SNYK-JS-MONGOOSE-472486	Yes
	Denial of Service (DoS) npm:ejs:20161130-1	Yes
	Directory Traversal npm:st:20140206	No

Commit messages

Package name: marked

The new version differs by 250 commits.

• 78db8fb Merge pull request Zeus test branch #1273 from 8fold/release-0.4.0
• 30a80e2 0.4.0
• 3957460 Merge pull request Test #1251 from markedjs/issue-templates
• dd10e47 🗜️ minify [skip ci]
• 0bc2fc5 Merge pull request [Snyk] Security upgrade mongoose from 4.2.4 to 6.4.6 #1265 from remyrylan/master
• 0218945 Merge pull request Ilan t snyk webhook test 1 #1266 from remyrylan/remove-extra-linebreak
• 6ab2593 Remove extra inner linebreak from code blocks
• 7b1d0be Update fenced code blocks to CommonMark standard
• 4e910c3 Add a "why" to feature request
• 0a247fe Create Proposal.md
• 63d1a45 Change desc of feature request
• cdd596f Update bug description
• 0c8ff4b Remove unnecessary sections
• 579f7bf 🗜️ minify [skip ci]
• 42c3915 Merge pull request Add Code and Open Source Vulns #1250 from tomtheisen/gfm-tasks
• 367604e Add links to demo
• c59e4a1 Update issue templates
• e0434b1 Merge pull request Hey snyk #1253 from Martii/patch-1
• 547ffb8 🗜️ minify [skip ci]
• dbd0dff Merge pull request Feature/new view #1256 from UziTech/test-travis
• 9b1c6aa move security scan to the end
• b151864 fast_finish
• 19832b4 allow redos test to fail
• fab3ee2 Merge pull request [Snyk-dev] Security upgrade node from 14.1.0 to 14.17.4 #994 from Feder1co5oave/fixes_992

See the full diff

Package name: mongoose

The new version differs by 250 commits.

• 40a879b chore: release 5.7.5
• 159457d chore: add vpn black friday as sponsor
• e6285ea Merge pull request #8244 from AbdelrahmanHafez/master
• d9163f5 fix: correct order for declaration
• cec9dda Minor refactor to ValidationError
• 13ae085 docs(index): add favicon to home page
• 96ce0eb style: fix lint
• 973b1e0 docs: add schema options to API docs
• cdfb507 chore: add useUnifiedTopology for tests re: #8212
• 936ddfb fix(update): handle subdocument pre('validate') errors in update validation
• 98b3b09 test(update): repro #7187
• b9c1012 docs(middleware): add note about accessing the document being updated in pre('findOneAndUpdate')
• 327b47a fix(subdocument): make subdocument#isModified use parent document's isModified
• 54db026 test(subdocument): repro #8223
• 89eb449 chore: now working on 5.7.5
• ffbff22 chore: change version for recompiling website
• 0562ca7 chore: add opencollective sponsors: top web design companies, casino top
• ee22c09 chore: now working on 5.7.5
• f3eca5b fix(query): delete top-level `_bsontype` property in queries to prevent silent empty queries
• cc10e0d test(query): repro #8222
• ede5aef chore: release 5.7.4
• 402db1a fix(model): support passing `options` to `Model.remove()`
• 7a20276 fix(schema): handle `required: null` and `required: undefined` as `required: false`
• 9b4a323 test(schema): repro #8219

See the full diff

Package name: tap

The new version differs by 250 commits.

• fe8158e 11.1.3
• b17542d Upgrade deps (changing semver requirements)
• bc3ba17 update deps
• bd4de92 Clean up nyc output so Travis passes on node 6
• 2292432 Add hexagonal-lambda to the tap 100 list
• fed62c9 Merge remote-tracking branch 'origin/master'
• 3cdf1c7 11.1.2
• ddf938b Only ship files we want to ship
• 5b5e2ee docs: add unique page titles
• 2323c3b Merge tag 'v11.1.1'
• 95faf6c 11.1.1
• 283c8e6 Handle EPIPE better in exceptional edge cases
• b727234 Fix obscure edge case when this.results is not set
• 1699eb9 process: update docs on the master branch
• ac366a0 docs: fix typo ('heirarchical' -> 'hierarchical')
• 13073a7 docs: correct 100 PR link
• b95ee22 v11.1.0
• fcf70aa Add support for disabling autoend
• 94be0a7 v11.0.1
• 6c3f019 remove badges that are no longer accurate or in use
• ae562a7 don't ignore coverage doc
• 9fcfd52 Migrate docs into main repository
• f189c50 v11.0.0
• 5cde128 Merge branch 'v11'

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic