[Snyk] Fix for 1 vulnerabilities

[johanoloflindberg]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LODASH-6139239	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: grunt-contrib-csslint

The new version differs by 11 commits.

• def72ff v2.0.0.
• ce67536 Reduce lodash usage.
• f387bb9 Merge pull request #73 from danpoltawski/show-line-numbers
• 888c0e1 Merge pull request #74 from gruntjs/update-csslint r=vladikoff
• 099cc12 Update CSSLint to v1.0.0.
• d220e09 Show line numbers with lint issues
• 7a02ddf Merge pull request #70 from gruntjs/deps
• 930ceee Update dependencies.
• 49d8c8a Upgrade grunt and devDeps to 1.0
• 8e1fde7 Update CHANGELOG.
• d001050 Add Appveyor for Windows testing.

See the full diff

Package name: grunt-env

The new version differs by 4 commits.

• 7d6bc17 1.0.0
• a2a6688 updated dependencies
• 27ad077 Merge pull request [Snyk] Security upgrade mongoose from 4.4.20 to 5.13.20 #37 from jirihelmich/patch-1
• e4f7e7e Docs update - using environment-dependent settings in configuration

See the full diff

Package name: grunt-karma

The new version differs by 31 commits.

• aab923d chore: release v3.0.0
• 02400ab chore: Update contributors
• b5afebd Merge pull request #263 from karma-runner/data-files
• 01e916c chore(refactor): simplify data.files creation
• 0174ca8 chore: add test for flattened 'files' option and clean up code (Fix incorrect responses count for form list view tellform/tellform#262)
• a5a2fc0 chore: match order between task definition and execution
• 19551fd fix(deps): Update test to use karma 3.0.0
• d7dad1e chore(deps): update eslint to version 5.4.0
• bc53ead chore: Remove unused 'pkgFile' from gruntfile.js
• 26626b7 chore: make travis and local 'npm test' do the same
• b7f3048 chore(package): update mocha to version 3.4.2
• 1182766 fix(deps): update lodash version to address npm audit warning
• 60373bc chore: add a Git .mailmap with my new name
• d33f70e chore(travis): update Node versions tested
• 9314248 fix: ensure proper path format
• 01cf310 chore(deps): fix peerDependency on Grunt to include v1.x.
• 38236eb Merge pull request #194 from gnail/patch-1
• 33386b3 fix: Remove hardcoded useIframe & captureConsole opts
• c7a27c2 Merge pull request #193 from karma-runner/upgrade
• a911ca1 feat: upgrade dependencies
• afb752f chore: release v2.0.0
• 13ffaab chore: Update contributors
• e81dc13 Merge pull request fix css lint errors tellform/tellform#189 from ValentinH/handle-base-path-in-preprocessors
• e31195a Merge pull request Fix up Heroku apps.json tellform/tellform#190 from MikeDimmickMnetics/background-use-client-send

See the full diff

Package name: main-bower-files

The new version differs by 25 commits.

• 3e72915 Merge branch 'nathanaelnsmith-master'
• c10c547 Updated README.md and added unit test for exclude group feature
• 7597ec7 2.12.0
• 795e59b Finished implementing excluding group from bower file list.
• ff9ae8a Fixed issue with variable referenced out of order
• fa9b96d Exclude group from dependencies
• 8f4bb2c updated vinyl-fs
• 8ef5cf6 version 2.11.1
• 74c146e Merge branch 'pwang2-fix-bower-main-slash'
• d49d53d Merge branch 'fix-bower-main-slash' of https://github.com/pwang2/main-bower-files into pwang2-fix-bower-main-slash
• 78e91cd updated tern config file
• 580e540 add test for slash path deny
• 4e2a320 Deny absolute bower main file,
• b9cb4fc prove giving wrong message when main path start with /
• 5eb5072 version 2.11.0
• 75d0445 Merge pull request #123 from ball6847/feature-deps-group
• 73faa81 add semicolon to the missing line
• 39524a7 add more test and document about group option
• 09e230e add tests for group options
• e918565 make it supports node v0.10, as travis-ci run on this version
• d9dff42 add dependency group options
• bafd804 Merge pull request #120 from red2678/patch-1
• f2f53e1 Fix Typos
• 22db94e Fixed readme linebreaks

See the full diff

Package name: soap

The new version differs by 184 commits.

• d6d22c9 Release v0.24.0
• 414c225 adding bullets to separate each option
• 8dbf11d Added one-way response configuration options
• bcc41e6 Adding support for SOAP 1.2 Envelope Headers in the server side (#1003)
• 7a5550a chore: Upgrade Lodash to 4.17.5 (#1001)
• efca900 Error on custom deserializer example (#1000)
• 7604ac3 changed ClientSSLSecurity to ClientSSLSecurityPFX in the readme file
• fbacc86 Fix broken link
• bedb1fd Fixed checking for empty obj.Body before further actions (#986)
• 905eadb Enable multiArgs during promisification
• d2039c2 feat(client): add rawRequest to callback arguments (#992)
• e6c78f4 Updating the coverage to use the new version of Istanbul framework, the nyc.
• f6253a7 add option to remove element-by-element namespacing of json arrays (#994)
• 0eec713 Update Readme.md (#993)
• f8f5aef types: add Client.wsdl for accessing client.wsdl during soap.createClient() (#990)
• 3db3355 Update .travis.yml
• 569a2c7 docs: clarify section on client events in Readme.md (#989)
• cfd1629 only detect xsi:nil if its value is `true` (#983)
• a142aee Lookup definitions in child element first (#958)
• 4487d09 Release v0.23.0
• 3c740db Fixing tests broken by #979
• 24e4b30 replace non identifier chars to underscore (#978)
• a10386a Pool keep alive connections if forever option is used (#979)
• c94cc1c Use assert.ifError function in tests (#976)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution