[Snyk] Security upgrade xml-encryption from 0.11.2 to 1.2.3

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	556/1000 Why? Recently disclosed, Has a fix available, CVSS 5.4	XML External Entity (XXE) Injection SNYK-JS-XMLDOM-1084960	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: xml-encryption

The new version differs by 43 commits.

• ca3796b chore: Release version 1.2.3 (#83)
• 1996dd7 fix: package.json & package-lock.json to reduce vulnerabilities (#81)
• 435b1d0 dont pull in tests (#80)
• 4fa183c chore: remove codeql analysis (#78)
• f412aac Merge pull request #76 from auth0/update_forge
• 9b6df94 Bumps a new patch version
• cd9c41d Update node-forge to the latest version
• 52183cb Merge pull request #73 from auth0/esarafianou-codeql-scan
• 62abb0f Create codeql-analysis.yml to trigger scans
• 1f013c5 release 1.2.0 (#72)
• b5a912b feat: sinon is a dev dependency (#71)
• 30edc80 fix(utils): fix accidental duplicate export. (#70)
• 77efd10 chore: release 1.1.0 (#69)
• 25d22fd feat: Add warning when insecure algorithm is used. (#68)
• f5651cc feat: Add support for AES-GCM family (#67)
• e711f7b v1.0.0 release (#65)
• 9459c5a Fix a missing check in encryption for encrypt call (#64)
• 4625cc3 Merge pull request #62 from auth0/jenkins
• 9d781da Add Jenkins to handle the deployment
• 2fa11bc Run tests on every PR
• ee88388 Deprecate node 4/6 (#61)
• 29a22c0 Merge pull request #60 from gkwang/typo-fix
• c3507d8 Inline templates (#59)
• a61394d use template literals and escape-html to do XML construction

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic