[Snyk] Fix for 3 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/server/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-ASYNC-2441827	Yes	Proof of Concept
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Directory Traversal SNYK-JS-MOMENT-2440688	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: getos

The new version differs by 5 commits.

• 64e514e 3.1.2
• 4fde3c6 failed to semver bump last release
• 3287294 add version to keywords
• 1680f9d upgrade all deps
• 87e7dce fix: os-release should be checked last because it's mostly present in every Linux distribution ([Snyk] Security upgrade moment from 2.24.0 to 2.29.4 #88)

See the full diff

Package name: parse-domain

The new version differs by 2 commits.

• a22b76e chore(release): 3.0.0 [skip ci]
• 9f38492 feat: Complete rewrite in TypeScript and several bug fixes and improvements

See the full diff

Package name: winston

The new version differs by 250 commits.

• b47d5d5 3.3.0
• b6bc918 Prepare for v3.3.0
• 9354721 doc: fix whitespace and trailing comma. (Add "PATCH" to HTTPMethod type cypress-io/cypress#1778)
• 3d07a80 docs: add example of uncaughtRejections logging (takenAt should not be an array when multiple screenshots are combined into one cypress-io/cypress#1780)
• df25fa2 fix: change property of handleRejections (Add details about Semaphore CI cypress-io/cypress#1779)
• 950cbcd Add options to request (Tests run in Chrome with baseUrl set navigate directly to baseUrl instead of Test Runner URL cypress-io/cypress#1777)
• 1c75292 Update package-lock.json (Reversed argument order in .then cypress-io/cypress#1772)
• e7d13d5 Exclude unnecessary files from npm package (Pixel check on failure screenshots of tests with screenshots cypress-io/cypress#1768)
• 75f7edf Fix removes a logger when pass undefined transport (Add Semaphore CI params for generating repo url's  cypress-io/cypress#1785)
• 4b571ba This adds Node.js 14 and removes Node.js 8 as: (cy.screenshot bug fixes and enhancements cypress-io/cypress#1793)
• 73ae01f Update Sentry transport `require` change (Breaking config changes cypress-io/cypress#1754)
• 7b67eb0 Fix typo (Feature request: High-level way to assert whether the browser is playing an audio file cypress-io/cypress#1750)
• 1679c49 Fix Issue where winston removes transport on error (html base target _top lets cypress loose control cypress-io/cypress#1364) (Cypress.Cookies.debug(true) and setCookie doesn't work cypress-io/cypress#1714)
• 0e0cf14 Fix Accept flag --parallel to run spec files in parallel cypress-io/cypress#1690 (Respond to 'cancel run' from Dashboard and cancel remaining specs cypress-io/cypress#1691)
• 85a250a Node 12 is LTS now
• bea9c34 Update README.md ("Cypress plugin has crashed click here to reload extension" when launching from non-native terminal cypress-io/cypress#1743)
• 319abf1 Add defaultMeta to Logger index.d.ts (Unable to use deeply nested config or env in plugins cypress-io/cypress#1736)
• c719706 (typo) Missing label import in example (Yield details object from cy.screenshot() cypress-io/cypress#1733)
• 8944598 Update index.d.ts (Custom commands don't show up as a step in the UI cypress-io/cypress#1729)
• 7bb258c Fix `npm` logging levels on README.md (Does Cypress has analogue to Selenium's WebElement.isDisplayed? cypress-io/cypress#1737)
• 64744d7 Feature: Access browser extensions API/storage/messaging cypress-io/cypress#1567: document common transport options (auth option on cy.visit doesn't seem to work with "https" domain cypress-io/cypress#1723)
• ae2335b Add Humio transport link to docs (server(fix) cleanup integrationFolder in filePath, close #1704 cypress-io/cypress#1705)
• 785bd9e UPDATE levels on readme (http added) (.type() error is inaccurately stating what can be typed into cypress-io/cypress#1650)
• 4f44acb Add PostgresQL transport to list of community transports (Testing Breaks Due to Page Redirect cypress-io/cypress#1697)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Directory Traversal