[Snyk] Fix for 2 vulnerabilities

[jackromo888]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • templates/expo-template-blank-typescript/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	No	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Prototype Pollution SNYK-JS-XML2JS-5414874	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: expo

The new version differs by 250 commits.

• b0de4e6 Publish expo
• e17b40b Publish expo-linking, expo-asset, expo-auth-session
• a4a37bb Publish packages
• cf45f09 [metro-config] fix hermes internalbytecode symbolication error ([metro-config] fix hermes internalbytecode symbolication error expo/expo#20432)
• d15fc80 [core] fix installing expo hostobject thread issue on ios hermes ([core] fix installing expo hostobject thread issue on ios hermes expo/expo#20506)
• c8d12e2 [ios] Bump version [skip ci]
• fdd66d5 [ios] Bump version
• 46918db [ios] Bump version for simulator build [skip ci]
• 22efedc [home] Update prod home
• eac61e1 [home] Publish dev home
• 00a5358 [home] Launch directly to classic update ([home] Launch directly to classic update expo/expo#20480)
• 6831e11 [ios] Bump version
• 8679097 [Expo Go][iOS] No remote home app loads in release builds
• 732156d [expo] update `sentry-expo` and `@ sentry/react-native` versions ([expo] update sentry-expo and @sentry/react-native versions expo/expo#20201)
• faf3d02 Publish packages
• dec4d23 [auth-session] Remove incorrectly added projectNameForProject in 01095ed
• c86764f Publish expo-av, expo-gl
• b8df999 [av][gl] Fix duplicated META-INF files ([av][gl] Fix duplicated META-INF files expo/expo#20251)
• 271f257 [android] Bump Expo Go version [skip ci]
• 81abafa [android] re-version prebuilt so libs from ndk r21 ([android] re-version prebuilt so libs from ndk r21 expo/expo#20202)
• 1c5b1b7 Publish expo-build-properties
• 27e0dfe [build-properties] fix extraProguardRules be overwritten ([build-properties] fix extraProguardRules be overwritten expo/expo#20106)
• 8875736 [modules][Android] Fixed views are not correctly initialized after reloading on Android ([modules][Android] Fixed views are not correctly initialized after reloading on Android expo/expo#20063)
• 978c740 Publish expo-camera, expo-barcode-scanner

See the full diff

Package name: react-native

The new version differs by 250 commits.

• 7fc33cc [0.70.0] Bump version numbers
• e044a71 [0.70.0-rc.4] Bump version numbers
• a168c55 [LOCAL] follow up to codegen update
• a22ceec Bump react-native-codegen to 0.70.4
• 05dcebc [LOCAL] follow up to metro bump
• 97782c2 Upgrade RN CLI to v9.0.0 and Metro to 0.72.1 (#34447)
• 7a01444 Fix codegen trying to parse `.d.ts` files (#34439)
• b640f06 Update template to gitignore `android/app/.cxx` (#34430)
• 5367459 Make sure the template project name is `helloworld_appmodules` (#34417)
• 0b4b777 Hermes version bump for 0.70.0-RC4
• 1aabd09 [0.70.0-rc.3] Bump version numbers
• 1518f83 Upgrade react-native-gradle-plugin to 0.70.2 (#34390)
• 6d3b8a2 chore(deps): bump CLI to latest v9 alpha (#34385)
• c666fda Silence deprecation warning for react-native dependency. (#34368)
• 04990df Update the new app template to use CMake instead of Android.mk (#34354)
• 33ddb00 fix: react android kotlin plugin version conflict (#34255)
• 6a87015 Bump Gradle to 7.5.1 (#34359)
• 9424d2c Avoid full copy of large folly::dynamic objects in JSIExecutor#defaultTimeoutInvoker [RFC]
• a0ae1fb fix(android): Append `.exe` to hermesc binary path for Windows users (#34151)
• d077bdf [0.70.0-rc.2] Bump version numbers
• 120b988 Removing reactnativeutilsjni as it is built from the same sources as reactnativejni (#34339)
• 6450bc6 Fix accessibilityState overwriting view's disabled state on Android (#34287)
• 23cc056 Bump Gradle to 7.5.0 (#34310)
• 2176173 Upgrade react-native-gradle-plugin to 0.70.1 (#34330)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution