[Snyk] Fix for 1 vulnerabilities

[duyet]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-ASYNC-2441827	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: lwip

The new version differs by 52 commits.

• a65f608 0.0.9
• abbe557 update dependencies
• 1545c2a Merge pull request template rendering issue NodeBB/NodeBB#243 from nvartolomei/look-everywhere-for-bindings
• 15b0640 Merge pull request updateHeader call does not handle an open search box properly NodeBB/NodeBB#250 from chadwatson/fix-node6
• 32e91e5 Updates nan version to ^2.3.2
• c0b4dfb Use bindings package when requiring node bindingins. Fixes Don`t Start NodeBB NodeBB/NodeBB#242
• de12601 0.0.8
• 88d69dd use new travis infrastructure
• 3f1891e remove tests on node 0.11
• 8f3df6a increase tests timeout
• e284f0f run tests on appveyor
• 3aec009 This commit reverts 635ac57
• f37cc0e Merge pull request [Snyk] Fix for 2 vulnerabilities #4 from weareu/master
• 5975b1f Revert "Fix CImg memcpy overflow caused by N_CHANNELS 4"
• 0599cf0 Cleanup with delete.
• 6e58050 Revert back the uncommented delete statement.
• b2f0619 Copy of Buffer so that Nan does not free it post Nan 2.0.0
• 6902e76 remove delete for Pointer being freed was not allocated
• 404d0ed Fix appveyor
• f3e8e02 Remove Node 0.11 tests
• 871f4b9 Fix .travis.yml after merge
• 947ebc6 Fix CImg memcpy overflow caused by N_CHANNELS 4
• 635ac57 Add gcc+4.8 to travis
• 972ea9e Add quickfix for travis build according to https://github.com/Build on Node.js 4.1 at Travis CI does not work laverdet/node-fibers#249

See the full diff

Package name: prompt

The new version differs by 76 commits.

• c071b85 Merge pull request Deleted topics accessible via direct URL manipulation NodeBB/NodeBB#198 from caub/1.1
• 88c403e 1.1.0
• 756fa65 Fix inconsistent options.noHandleSIGINT for windows
• 8d5495c Merge pull request User search call is blocked NodeBB/NodeBB#196 from caub/promisify
• 33ddf56 prompt.get promise: add test, update readme
• b92a9a9 promisify prompt.get
• 0ff93b6 Merge pull request outgoing links are duplicated when going back NodeBB/NodeBB#184 from dsych/windows-sigint
• 9e80863 triggering sigint on windows
• 1c95d1d Merge pull request password reset doesn't work NodeBB/NodeBB#171 from blahah/master
• 65ac6e2 Merge pull request Image drag/drop elements need to be classed, not ID'd NodeBB/NodeBB#172 from Shank09/Shank09-package.json
• d03edd0 Added missing keywords in package.json
• df42a26 Respect falsy overrides (fixes unfilter username NodeBB/NodeBB#151)
• b732102 Merge pull request Bootstrap v3 Migration NodeBB/NodeBB#169 from jordanyaker/master
• 6ebf54a Removed the pkginfo dependency. Updated the required version of winston.
• 7d1a28f Removed the pkginfo dependency.
• d550674 Merge pull request Enhancement - User Reputation Overview NodeBB/NodeBB#163 from Eagerod/fixer/add-properties
• 9b5f65b Added a test addProperties() with no parameters.
• fb83773 Fixed an issue where the first parameter in a callback would not be the
• e7b5449 Merge pull request Enhancement - Unfollow users NodeBB/NodeBB#121 from rubbingalcoholic/master
• e493cb8 Merge pull request <code> blocks need better CSS NodeBB/NodeBB#153 from devrelm/devrelm.function-defaults
• 3046431 Merge pull request Remove unneded type tags for scripts NodeBB/NodeBB#156 from littleguga/master
• f62378f fix Prevent head explosions, use util.format NodeBB/NodeBB#69
• a9792b8 adding another test for function defaults
• 3e0856b allow functions as defaults

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution