[Snyk] Fix for 2 vulnerabilities

[saurabharch]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	Yes	Proof of Concept
	753/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gulp-eslint

The new version differs by 52 commits.

• 639e388 2.0.0
• 55f0c29 Update ESLint dependency;
• c11bba6 Remove rules that have been removed in ESLint@2.0.0-rc.0;
• 7f01da7 2.0.0-rc-3
• 5851668 Rename .eslintrc to .eslintrc.yml;
• e7ba0f2 2.0.0-rc-2
• 90841cb Tighten various test case configs;
• 3536eeb Update changeling;
• cbe6731 2.0.0-rc-1
• dcdfff7 Update to ESLint next/2.0.0-rc-* dependency;
• 7f190a6 Fix listing error;
• adf2180 Fix path in comment
• 9378eef Simplify the cached-lint watch.js example;
• 6def722 Merge pull request Redirect unauthenticated users to always go to the home screen. Authe… jes708/CodeGenius#121 from 5im0n/update-readme
• 67fcd75 Update eslint.results in README.md
• 328cba9 1.1.1
• ce6125b Migrate baseConfig options before others options;
• e3b7d1e Merge pull request Restrict Non-Authenticated Users Accessing other webpages jes708/CodeGenius#119 from ReadmeCritic/master
• 7146108 Missing anchor
• 3894f01 Update README URLs based on HTTP redirects
• b00c579 1.1.0
• 005862d 1.0.0
• 4cb6145 Update tests to avoid a regression in ESLint's source-fixer;
• 7e8c826 Update README to include API updates;

See the full diff

Package name: gulp-istanbul

The new version differs by 40 commits.

• 502855e 1.1.2
• ac8f966 Add documentation for reportOpts and watermarks (Redirect unauthenticated users to always go to the home screen. Authe… jes708/CodeGenius#121)
• be326d1 Update README.md to warn about gulp-mocha (StudentTests should clear out and be replaced when a new assessment is selected jes708/CodeGenius#120)
• b0149ac fix(package): update istanbul-threshold-checker to version 0.2.1 (Annotation persistence jes708/CodeGenius#112)
• 7ec737a chore(package): update dependencies (added nodemailer to send email if test is marked from false to true jes708/CodeGenius#110)
• b047c82 Update .travis.yml
• a8dd45e 1.1.1
• 18ed282 Fix override default reporters (Create team forks jes708/CodeGenius#101)
• 5aefe19 1.1.0
• 081c841 Bump dependencies
• eef2bb3 Update travis covered versions
• e94f537 Allow passing deep options to the instrumenter. Fix [Snyk] Security upgrade nodemailer from 2.7.2 to 4.0.1 #79
• d93e057 → Fix common cross-platform issue with file path normalization. ([Snyk] Security upgrade nodemailer from 2.7.2 to 4.0.1 #86)
• d34854f Commented "supports es6" on isparta instrumenter (Disable Student and Panel tabs when there's no assessment jes708/CodeGenius#97)
• 200153d 1.0.0
• 8a07dbe gulp-sourcemap support ([Snyk] Security upgrade css-loader from 0.23.1 to 1.0.0 #94)
• 99432aa Merge pull request [Snyk] Security upgrade webpack from 1.15.0 to 5.94.0 #91 from nimrod-becker/master
• 5e79eb4 Remove opts.resolveAbsolutePaths option, simply don't path.resolve
• 27be6aa Provide an option to skip path resolution
• 293cf78 Update documentation Fix [Snyk] Security upgrade bootstrap from 3.4.1 to 5.0.0 #89
• 5e01abf 0.10.4
• e9a92b9 Merge pull request [Snyk] Fix for 2 vulnerabilities #84 from pine613/feature/lodash_v4
• e012202 Upgrade lodash from v3.x to v4.x
• 3177d2d 0.10.3

See the full diff

Package name: sequelize-handlers

The new version differs by 4 commits.

• 01ce037 Bumped version to 0.2.0.
• 2dc698d Fixed a lodash call.
• 900a0f0 Updated lodash to 4.13.1.
• f182898 Added the capability to use JSON values in the query string.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic