[Snyk-dev] Fix for 100 vulnerabilities

[VeronicaSnyk]

Snyk has created this PR to fix 100 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Prototype Pollution SNYK-JS-LODASH-567746	****
	Prototype Pollution SNYK-JS-LODASH-608086	****
	Prototype Pollution SNYK-JS-LODASH-73638	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-174116	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342073	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342082	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-451540	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-584281	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	****
	Prototype Pollution SNYK-JS-MINIMIST-2429795	****
	Prototype Pollution SNYK-JS-MINIMIST-559764	****
	Prototype Pollution SNYK-JS-MIXINDEEP-450212	****
	Directory Traversal SNYK-JS-MOMENT-2440688	****
	Denial of Service (DoS) SNYK-JS-MONGODB-473855	****
	Prototype Pollution SNYK-JS-MONGOOSE-1086688	****
	Prototype Pollution SNYK-JS-MONGOOSE-2961688	****
	Information Exposure SNYK-JS-MONGOOSE-472486	****
	Prototype Pollution SNYK-JS-MPATH-1577289	****
	Prototype Pollution SNYK-JS-MQUERY-1050858	****
	Prototype Pollution SNYK-JS-MQUERY-1089718	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-13271681	****
	Prototype Pollution SNYK-JS-SETVALUE-1540541	****
	Prototype Pollution SNYK-JS-SETVALUE-450213	****
	Prototype Pollution SNYK-JS-TYPEORM-590152	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251	****
	Arbitrary Code Injection SNYK-JS-UNDERSCORE-1080984	****
	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090599	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090600	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090601	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090602	****
	Prototype Pollution SNYK-JS-Y18N-1021887	****
	Prototype Pollution SNYK-JS-YARGSPARSER-560381	****
	Arbitrary File Write via Archive Extraction (Zip Slip) npm:adm-zip:20180415	855
	Remote Code Execution (RCE) SNYK-JS-EJS-2803307	621
	Cross-site Scripting (XSS) SNYK-JS-JQUERY-565129	496
	Command Injection SNYK-JS-LODASH-1040724	318
	Uninitialized Memory Exposure npm:npmconf:20180512	286
	Prototype Pollution SNYK-JS-DUSTJSLINKEDIN-1089257	279
	Prototype Pollution SNYK-JS-JQUERY-174006	267
	Cross-site Scripting (XSS) SNYK-JS-JQUERY-567880	266
	Arbitrary Code Execution npm:ejs:20161128	242
	Remote Memory Exposure npm:mongoose:20160116	237
	Denial of Service (DoS) SNYK-JS-DICER-2311764	222
	Prototype Pollution SNYK-JS-EXPRESSFILEUPLOAD-595969	220
	Regular Expression Denial of Service (ReDoS) npm:marked:20180225	214
	DLL Injection SNYK-JS-KERBEROS-568900	212
	Open Redirect npm:st:20171013	208
	Code Injection npm:dustjs-linkedin:20160819	201
	Remote Code Execution (RCE) SNYK-JS-HANDLEBARS-1056767	198
	Directory Traversal SNYK-JS-ADMZIP-1065796	195
	Cross-site Scripting (XSS) npm:marked:20150520	190
	Prototype Pollution SNYK-JS-HANDLEBARS-534988	188
	Prototype Pollution npm:lodash:20180130	186
	Arbitrary Code Injection SNYK-JS-EJS-1049328	167
	Prototype Pollution SNYK-JS-AJV-584908	165
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	159
	Denial of Service (DoS) SNYK-JS-EXPRESSFILEUPLOAD-473997	154
	Prototype Pollution SNYK-JS-LODASH-450202	154
	Cross-site Scripting (XSS) npm:marked:20170815	154
	Denial of Service (DoS) SNYK-JS-FILETYPE-2958042	152
	Denial of Service (DoS) SNYK-JS-LODASH-12239302	152
	Cross-site Scripting (XSS) npm:marked:20170112	152
	Regular Expression Denial of Service (ReDoS) npm:marked:20170907	152
	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	151
	Prototype Pollution SNYK-JS-INI-1048974	149
	Arbitrary Code Execution SNYK-JS-HANDLEBARS-534478	148
	Prototype Pollution SNYK-JS-HANDLEBARS-1279029	145
	Prototype Pollution SNYK-JS-HANDLEBARS-469063	141
	Denial of Service (DoS) npm:ejs:20161130-1	136
	Regular Expression Denial of Service (ReDoS) npm:moment:20161019	136
	Prototype Pollution SNYK-JS-HANDLEBARS-567742	134
	Cross-site Scripting (XSS) npm:ejs:20161130	134
	Directory Traversal npm:st:20140206	127
	Prototype Override Protection Bypass npm:qs:20170213	115
	Directory Traversal SNYK-JS-ASYNC-12239908	114
	Denial of Service (DoS) SNYK-JS-HANDLEBARS-480388	114
	Regular Expression Denial of Service (ReDoS) npm:fresh:20170908	114
	Regular Expression Denial of Service (ReDoS) npm:negotiator:20160616	114
	Prototype Pollution SNYK-JS-HANDLEBARS-173692	108
	Prototype Pollution SNYK-JS-HANDLEBARS-174183	108
	Alternate solution to CWE-1333	Inefficient Regular Expression Complexity SNYK-JS-DEBUG-14214893
	Cross-site Scripting (XSS) npm:jquery:20150627	97
	Cross-site Scripting (XSS) npm:marked:20170815-1	95
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	84
	Denial of Service (DoS) npm:mem:20180117	73
	Cross-site Scripting (XSS) SNYK-JS-COLORNAME-17614999	69
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	63
	Validation Bypass SNYK-JS-KINDOF-537849	58
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BRACEEXPANSION-9789073	57
	Regular Expression Denial of Service (ReDoS) npm:ms:20170412	54
	Regular Expression Denial of Service (ReDoS) npm:moment:20170905	53
	Regular Expression Denial of Service (ReDoS) SNYK-JS-DEBUG-13283909	46
	Regular Expression Denial of Service (ReDoS) npm:ms:20151024	46
	Regular Expression Denial of Service (ReDoS) npm:semver:20150403	46
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	40
	Regular Expression Denial of Service (ReDoS) npm:mime:20170907	40
	Reverse Tabnabbing SNYK-JS-ISTANBULREPORTS-2328088	35

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Directory Traversal
🦉 Prototype Pollution
🦉 Regular Expression Denial of Service (ReDoS)
🦉 More lessons are available in Snyk Learn