[Snyk] Fix for 8 vulnerabilities #106

mattdanielbrown · 2023-11-28T15:11:08Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- packages/benchmarks/package.json

Vulnerabilities that will be fixed

With an upgrade:

Priority Score (*)	Issue	Breaking Change	Exploit Maturity
696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-COLORSTRING-1082939	Yes	Proof of Concept
586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	Yes	Proof of Concept
539/1000 Why? Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-NODEFETCH-2342118	No	No Known Exploit
520/1000 Why? Has a fix available, CVSS 5.9	Denial of Service SNYK-JS-NODEFETCH-674311	No	No Known Exploit
586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	Yes	Proof of Concept
479/1000 Why? Has a fix available, CVSS 5.3	Improper Input Validation SNYK-JS-POSTCSS-5926692	Yes	No Known Exploit
589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: css-loader

The new version differs by 80 commits.

634ab49 chore(release): 2.0.0
6ade2d0 refactor: remove unused file ([fix] Picker default font styles necolas/react-native-web#860)
e7525c9 test: nested url (SafeAreaView is not implemented necolas/react-native-web#859)
7259faa test: css hacks (Add ability to provide render callback necolas/react-native-web#858)
5e6034c feat: allow to filter import at-rules (Usage with Flow necolas/react-native-web#857)
5e702e7 feat: allow filtering urls (Fix relatedTarget regression necolas/react-native-web#856)
9642aa5 test: css stuff (relatedTarget missing from focus and blur events necolas/react-native-web#855)
3338656 fix: reduce number of require for url (build works but render fail necolas/react-native-web#854)
533abbe test: issue 636 (How to remove this lib from my project? necolas/react-native-web#853)
08c551c refactor: better warning on invalid url resolution (transitionProperty and transitionTimingFunction order does not match necolas/react-native-web#852)
b0aa159 test: issue Fix example in README necolas/react-native-web#589 (errors in build necolas/react-native-web#851)
f599c70 fix: broken unucode characters (Status bar necolas/react-native-web#850)
1e551f3 test: issue 286 (How do you use react-native libraries? necolas/react-native-web#849)
419d27b docs: improve readme (Fire 'onLayout' when elements are resized necolas/react-native-web#848)
d94a698 refactor: webpack-default (Ability to render Touchable as <button> on web necolas/react-native-web#847)
b97d997 feat: schema options
453248f fix: support module resolution in composes (Merge styles into one className necolas/react-native-web#845)
8a6ea10 refactor: postcss plugins (Getting the browser DOM node necolas/react-native-web#844)
fdcf687 fix: url resolving logic (Flow typing for react-native-web components not working necolas/react-native-web#843)
889dc7f feat: allow to disable css modules and disable their by default (Some icons in react-native-vector-icons can not send requests! necolas/react-native-web#842)
ee2d253 test: importLoaders option (DeviceEventEmitter is converted nothing necolas/react-native-web#841)
1dad1fb feat: reuse postcss ast from other loaders (i.e `postcss-loader`) (react-native-web necolas/react-native-web#840)
fe94ebc test: icss reserved keywords (react-native-web necolas/react-native-web#839)
9eaba66 refactor: migrate on message api for postcss-icss-plugin ([fix] Import react-art only client side to avoid crash necolas/react-native-web#838)

See the full diff

Package name: webpack

The new version differs by 250 commits.

610f368 5.0.0
5ce65c1 update examples
bbe1230 Merge pull request #11628 from webpack/bugfix/real-content-hash
75ecff2 5.0.0-rc.6
bfc35d6 Merge pull request #11603 from MayaWolf/master
76e8cbd Merge pull request #11622 from webpack/dependabot/npm_and_yarn/types/node-13.13.25
9fd1be2 chore(deps-dev): bump @ types/node from 13.13.23 to 13.13.25
36bcfaa Merge pull request #11621 from webpack/bugfix/11619
9130d10 fix called variables with ProvidePlugin
3e42105 Merge pull request #11620 from webpack/bugfix/11617
4709719 skip connections copied to concatenated module
57b493f 5.0.0-rc.5
1658e2f Merge pull request #11618 from webpack/bugfix/11615
a8fb45d fixes crash in SideEffectsFlagPlugin
84b196d emit error instead of crashing when unexpected problem occurs
5573fed Merge pull request #11601 from Hornwitser/improve-suggested-polyfill-config
9b5cce9 Merge pull request #11609 from snitin315/export-types
37c495c export type RuleSetUseItem
39faf34 export type RuleSetUse
e5fd246 export type RuleSetConditionAbsolute
660baad export RuleSetCondition types
13e3ca5 Merge pull request #11602 from webpack/bugfix/shared-runtime-chunk
9c0587e Merge pull request #11606 from webpack/dependabot/npm_and_yarn/simple-git-2.21.0
502d166 Merge pull request #11607 from webpack/dependabot/npm_and_yarn/acorn-8.0.4