[Snyk] Fix for 14 vulnerabilities

[AH7]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	No	Proof of Concept
	679/1000 Why? Has a fix available, CVSS 9.3	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962463	No	No Known Exploit
	761/1000 Why? Mature exploit, Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-DICER-2311764	Yes	Mature
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	No	Proof of Concept
	641/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.4	Prototype Pollution SNYK-JS-JSON5-3182856	No	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	Yes	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	Yes	Proof of Concept
	596/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.5	Arbitrary Code Injection SNYK-JS-UNDERSCORE-1080984	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	No	No Known Exploit
	484/1000 Why? Has a fix available, CVSS 5.4	XML External Entity (XXE) Injection SNYK-JS-XMLDOM-1084960	Yes	No Known Exploit
	539/1000 Why? Has a fix available, CVSS 6.5	Improper Input Validation SNYK-JS-XMLDOM-1534562	Yes	No Known Exploit
	639/1000 Why? Has a fix available, CVSS 8.5	Prototype Pollution SNYK-JS-XMLDOM-3042242	Yes	No Known Exploit
	811/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 9.8	Improper Input Validation SNYK-JS-XMLDOM-3092935	Yes	Proof of Concept
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Regular Expression Denial of Service (ReDoS) npm:braces:20180219	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: jsonld

The new version differs by 250 commits.

• aff94e1 Release 5.0.0.
• 85687f7 Update changelog.
• 727739f Avoid header param mutation.
• 29df460 Add note about user-agent note.
• 1046c29 Avoid extra JSON.stringify().
• 799d22c Update dependencies.
• ce32d7d Cleanup.
• 28ab800 Remove unused dependency.
• 04d9aae Node.js document loader updates.
• d12b4e3 Ignore nyc output.
• 2c41fb4 Support Node.js >= 12.
• 5e44c20 Remove unneeded await.
• b56999b Distribute ES Module bundle.
• aa8f0cc Switch to Babel 'usage' mode.
• b119cf8 Formatting.
• 22c8023 Remove unused plugins option.
• 6981a04 Update dependencies.
• 0649324 Remove unused commander dependency.
• 1779e3f Test in faster development mode.
• a9c086f Update CHANGELOG to reflect latest changes.
• 9fc8074 Include .js extension in browser alias for node documentLoader.
• 34f00af Do not include node documentLoader in browser build.
• ddce29c Use an httpsAgent with StrictSSL & user headers getters for other headers.
• d99c855 Use headers.set not =.

See the full diff

Package name: nodemailer

The new version differs by 4 commits.

• eaef3b5 Merge pull request Group acl integration nodeSolidServer/node-solid-server#719 from nodemailer/v3.0.0
• de5b6f6 updated license
• 652ad8e Do not use PRO in name
• 6218b8d Setup files for EUPL licensed v3.0.0

See the full diff

Package name: rdflib

The new version differs by 250 commits.

• ce17c86 2.2.15
• b19ca97 Merge pull request Switch to the official oidc issuer link rel value nodeSolidServer/node-solid-server#540 from karfau/update-xmldom
• 0909dbf test(ts): Infer type by using a type checker for Element
• 2038a66 Update dependency xmldom
• 9228ae3 update dependencies
• e3037a1 2.2.14
• 0421f77 2.2.13
• f6f3b61 update dependencies
• 1a90b03 Merge pull request Add authenticated reverse proxy mechanism nodeSolidServer/node-solid-server#533 from linkeddata/jeff-zucker-alternate-fetches-readme
• ec4ac9e Merge pull request Set default test timeout to 10 seconds. nodeSolidServer/node-solid-server#532 from linkeddata/jeff-zucker-alternate-fetches
• 8b1f73c added text on global vars
• ca45493 Update Documentation/alternate-fetches.md
• 0e27fde Update Documentation/alternate-fetches.md
• 96ff94a Update Documentation/alternate-fetches.md
• dfd110d Update Documentation/alternate-fetches.md
• 0c4f9b8 Update Documentation/alternate-fetches.md
• 8c5fe1c Update Documentation/alternate-fetches.md
• 90af0da Update Documentation/alternate-fetches.md
• 1329dd5 Update Documentation/alternate-fetches.md
• 495b7ae Update Documentation/alternate-fetches.md
• e09638a Update README.md
• df282cc Create alternate-fetches.md
• 35ebd4c Merge pull request Add and document test script with NODE_TLS_REJECT_UNAUTHORIZED nodeSolidServer/node-solid-server#530 from linkeddata/solidFetch
• cbbb052 user fetch renamed to solidFetch

See the full diff

Package name: solid-permissions

The new version differs by 7 commits.

• de10807 0.5.1: Fix installs by building on prepublish
• bb1cce8 Merge pull request [Snyk] Security upgrade node-forge from 0.6.49 to 0.10.0 #13 from solid/dan-f/unbreak-install
• 5be8c66 Unbreak installs
• e5d8156 0.5.0
• c60141e Merge pull request [Snyk] Fix for 1 vulnerabilities #11 from solid/dz_export_constants
• 823c67c Clarify docstring for accessMode()
• 8e6781a Export all acl-related constants at module level

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution
🦉 Server-side Request Forgery (SSRF)
🦉 More lessons are available in Snyk Learn