[Snyk] Security upgrade soap from 0.35.0 to 0.40.0

[MateMalice]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	619/1000 Why? Has a fix available, CVSS 8.1	Prototype Pollution SNYK-JS-AJV-584908	No	No Known Exploit
	644/1000 Why? Has a fix available, CVSS 8.6	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	No	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Poisoning SNYK-JS-QS-3153490	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: soap

The new version differs by 21 commits.

• d74453d Release v0.40.0
• 65f4f15 Update Readme.md (#1150)
• 21b3373 Allow server path to be a regex (#1149)
• 5b7dfe2 replace request & httpntlm with axios & axios-ntlm (#1146)
• 22c234f Release v0.39.0
• a913515 Fixed namespace resolution in case of complexType extension. (#1145)
• 290e3c1 Read length of buffer directly (#1147)
• 95fa71f Release v0.38.0
• a1ad8ab Bump typedoc to 0.20.36, update package-lock.json (#1141)
• 25954fd Add an option to for an envelopeKey for WSSecurity (#1143)
• d684525 Circular element references inside wsdl - assistance needed (#1142)
• e61aa55 Remove duplicate paragraph and example code in Readme. (#1140)
• bf3b07d Release v0.37.0
• 272a7da Arrays with proper prefix and namespace (#1137)
• 0ef3c0e update xml-crypto version (#1138)
• 2b1e8bd Add native support for short deserialization (#1136)
• a6ae805 add handling for extension base without children (#1135)
• 1c76a87 Release v0.36.0
• 9c931e2 + pass *res* and *server* object into header() and method() (#1130)
• dd30130 refactor: use of Buffer.from instead of a deprecated new Buffer() (#1134)
• 9903060 Extract required HttpClient functions to dedicated interface (#1132)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution