[Snyk] Security upgrade swagger-ui from 4.1.0 to 4.1.3

[slapshin]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	591/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.4	Server-side Request Forgery (SSRF) SNYK-JS-SWAGGERUI-6056392	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: swagger-ui

The new version differs by 31 commits.

• 01a3e55 fix(security): disable reading config params from URL search params (#7697)
• df7749b chore(deps-dev): bump less from 4.1.1 to 4.1.2 (#7685)
• bc4710f chore(deps-dev): bump eslint-plugin-import from 2.25.2 to 2.25.3 (#7683)
• e546383 chore(deps-dev): bump @ babel/plugin-proposal-optional-chaining (#7682)
• 1386ae5 chore(deps-dev): bump source-map-support from 0.5.19 to 0.5.21 (#7681)
• 60cab5f chore(deps-dev): bump @ commitlint/cli from 12.1.4 to 15.0.0 (#7678)
• c572cfe chore(release): cut the v4.1.2 release
• f3d3898 fix: request JumpToPath components always as container
• 7b52233 chore(release): cut the v4.1.1 release
• c69aed2 chore(deps): allow updating patch and minor version for highlihter
• b299be7 fix: introduce Error Boundaries to handle unexpected failures (#7671)
• fd22564 chore(deps-dev): fix security vuln. in react-syntax-highlighter
• 0e699d1 chore(deps-dev): bump husky from 7.0.2 to 7.0.4 (#7664)
• 2ff9437 chore(deps-dev): bump @ commitlint/config-conventional
• 120eb5e chore(deps): bump redux from 4.1.0 to 4.1.2 (#7663)
• 519748d chore(deps-dev): bump @ babel/eslint-parser from 7.14.3 to 7.16.3 (#7660)
• 8c2d345 chore(deps-dev): bump autoprefixer from 10.3.1 to 10.4.0 (#7659)
• 40bf75f chore(deps-dev): bump cypress from 7.7.0 to 9.0.0
• 8a06f8d chore(deps-dev): bump @ babel/plugin-transform-runtime (#7655)
• a82433c chore(deps-dev): bump @ babel/plugin-proposal-nullish-coalescing-operator (#7656)
• 18d4fb3 chore(deps-dev): bump eslint-plugin-jest from 24.4.0 to 25.2.4 (#7629)
• e0e8b42 chore(deps-dev): bump cssnano from 5.0.4 to 5.0.11 (#7652)
• 738c4d6 chore(deps-dev): bump json-server from 0.16.3 to 0.17.0 (#7651)
• 9b5cbec ci: optimize speed of CI (#7649)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)