[Snyk] Fix for 4 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/next/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	619/1000 Why? Has a fix available, CVSS 8.1	Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-536840	No	No Known Exploit
	706/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.7	Arbitrary Code Injection SNYK-JS-SERIALIZEJAVASCRIPT-570062	No	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	No	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: terser-webpack-plugin

The new version differs by 48 commits.

• 467f505 chore(release): 1.4.4
• 915e25b fix: security problem ([Snyk] Fix for 1 vulnerable dependencies #257)
• f816d96 chore(release): 1.4.3
• 68611d9 chore(release): 1.4.2
• aa12914 chore(release): 1.4.1
• bc19b72 fix: removed unnecessary dependency ([Snyk] Fix for 1 vulnerable dependencies #111)
• 2b2cb8a chore(release): 1.4.0
• 9d777f0 feat: generate higher quality SourceMaps ([Snyk] Fix for 1 vulnerable dependencies #109)
• 45ddf2f chore(defaults): update ([Snyk] Fix for 1 vulnerable dependencies #110)
• a0d8317 chore(release): 1.3.0
• 15d1595 feat: update terser to 4 version ([Snyk] Fix for 1 vulnerable dependencies #97)
• e5de064 chore(defaults): update ([Snyk] Fix for 1 vulnerable dependencies #96)
• 6d7aaa7 chore(release): 1.2.4
• d9533dd fix: disable parallel on WSL due bugs ([Snyk] Fix for 1 vulnerable dependencies #90)
• 449e0fc chore(defualts): update ([Snyk] Fix for 1 vulnerable dependencies #88)
• 3cdd2ed fix: fallback for cache directory ([Snyk] Fix for 1 vulnerable dependencies #86)
• 2388f2a docs: link on `terser-webpack-plugin-legacy` ([Snyk] Fix for 1 vulnerable dependencies #77)
• 22352b0 chore(release): 1.2.3
• 675edfd fix: invalidate cache after changing node version
• 6abc66c chore(defaults): update ([Snyk] Fix for 1 vulnerable dependencies #72)
• ea99cce chore(release): 1.2.2
• 83f4f0f chore(deps): update ([Snyk] Fix for 1 vulnerable dependencies #70)
• 0593d7c fix: cannot read property 'minify' of undefined ([Snyk] Fix for 1 vulnerable dependencies #69)
• bb902d7 chore(release): 1.2.1

See the full diff

Package name: webpack

The new version differs by 165 commits.

• 04f90c5 4.26.0
• e1df721 Merge pull request correct code in README.md to behavior described vercel/next.js#8392 from vkrol/cherry-pick-terser-to-webpack-4
• a818def fix for changed API in terser plugin warningsFilter
• b39abf4 Rename test directories too
• 311a728 Switch from uglifyjs-webpack-plugin to terser-webpack-plugin
• a230148 Merge pull request Add note explaining empty query during prerendering vercel/next.js#8351 from DeTeam/chunk-jsdoc-typo
• 7a0af76 Fix a typo in Chunk#split jsdoc comment
• 2361995 4.25.1
• e2a2016 Merge pull request publicRuntimeConfig is empty during development vercel/next.js#8338 from webpack/bugfix/issue-8293
• babe736 replace prefix/postfix even when equal for wrapped context
• dcd0d59 test for Use 'initial' setting for SplitChunksPlugin vercel/next.js#8293
• af123a8 Merge pull request Fix for __dirname vercel/next.js#8334 from webpack/bugfix/lint
• 36eb0bb move azure specific commands to azure-pipelines.yml
• 290094e 4.25.0
• 355590e Merge pull request Add warning for API export routes vercel/next.js#8250 from Aladdin-ADD/patch-3
• 0293c3a Merge pull request Need Option open target blank in Router Push vercel/next.js#8279 from smelukov/support-entry-progress
• 1ea411b Merge pull request Remove next.config.js from create-next-app vercel/next.js#8139 from NaviMarella/FormatManifest
• 4b72635 exclude watch test cases
• e35d084 increase test timeout
• 6be1411 move schema into definitions
• 3d74504 add missing hooks to progress
• 56d8a8f prevent writing the same message multiple times to stderr
• 64e3826 use flags to show different parts of the progress message
• 8c5e74f Merge branch 'master' into support-entry-progress

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)
🦉 Arbitrary Code Injection
🦉 Regular Expression Denial of Service (ReDoS)