[Snyk] Upgrade universalviewer from 4.0.18 to 4.0.24

[portableant]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade universalviewer from 4.0.18 to 4.0.24.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2023-11-09.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	432/1000 Why? Proof of Concept exploit, CVSS 6.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WORDWRAP-3149973	432/1000 Why? Proof of Concept exploit, CVSS 6.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: universalviewer

• 4.0.24 - 2023-11-09
  

  4.0.24

• 4.0.22 - 2023-06-20
  

  4.0.22

• 4.0.21 - 2023-05-31
  

  4.0.21

• 4.0.19 - 2023-05-11
  

  4.0.19

• 4.0.18 - 2023-03-29
  

  4.0.18

from universalviewer GitHub release notes

Commit messages

Package name: universalviewer

• 0e34e2f 4.0.24
• c192ecc update package-lock
• 7c5b829 4.0.23
• 7def8e3 update contributing.md
• 349032e use settimeout
• 4cc4696 update tree
• b40a583 rm old css
• c8e28d4 add title
• f58aa7e merge main
• 72ae729 fixed #916
• ca04992 fix: better sort video and caption elements. (#942)
• f503281 Update PDFCenterPanel.ts (#940)
• 8791002 fixes #913: Reinstate viewing properties on resources w/o service descriptor (#941)
• c146cb4 move rtl class to root el
• 1f2cdcf rtl title and left panel contents
• 766b29c Fix broken anchor in README.md (#935)
• e9b5ccf Consolidate localisation config (#906)
• 9aaf9e9 Fix minor uv.html issues with config loading and resize handling (#931)
• 6f7e2dd 4.0.22
• fd33d27 Merge pull request #920 from UniversalViewer/feature/bl-may-23-2
• 79ab4fc Updated AV component
• 4d99a48 Update deps
• 0c54bbe SAPI-883 - fix for relative time
• 5f212a9 4.0.21

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[github-actions]

Stale pull request message