[Snyk] Fix for 19 vulnerabilities

[kinexis-uk]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-ASYNC-2441827	Yes	Proof of Concept
	786/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 9.3	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962463	Yes	Proof of Concept
	631/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.2	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	Proof of Concept
	641/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.4	Prototype Pollution SNYK-JS-JSON5-3182856	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	Yes	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LOADERUTILS-3043105	Yes	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	Yes	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-450202	Yes	Proof of Concept
	731/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.2	Prototype Pollution SNYK-JS-LODASH-567746	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-73638	Yes	Proof of Concept
	541/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 4.4	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	Yes	No Known Exploit
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Prototype Pollution SNYK-JS-MINIMIST-2429795	Yes	Proof of Concept
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-MINIMIST-559764	Yes	Proof of Concept
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution npm:lodash:20180130	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: babel-eslint

The new version differs by 98 commits.

• 4bd049e 10.1.0
• 2c754a8 Update Babel to ^7.7.0 and enable Flow enums parsing ((Feature) enable/disable whitelists for any tier poanetwork/token-wizard#812)
• 183d13e 10.0.3
• 354953d fix: require eslint dependencies from eslint base ((Fix) Check status of transactions poanetwork/token-wizard#794)
• 48f6d78 10.0.2
• 0241b48 removed unused file reference (Stuck while deploying contract poanetwork/token-wizard#773)
• 4cf0a21 10.0.1
• 98c1f13 Revert (Bug) Multiple-tiers crowdsale, countdown timer show time to the end of latest tier poanetwork/token-wizard#584 ((Fix) unify dev and prod interfaces poanetwork/token-wizard#697)
• 8f78e28 10.0.0
• 717fba7 test value should be switched
• 020d012 Treat type alias declarationlike function declaration ((Bug) Multiple-tiers crowdsale, countdown timer show time to the end of latest tier poanetwork/token-wizard#584)
• b400cb1 Test eslint5, update peerDep ( CrowdsaleTokenExt Errors poanetwork/token-wizard#690)
• c333bd6 Drop old monkeypatching behavior ((Fix) Supply calculus for invest page poanetwork/token-wizard#689)
• 6aa8b6f 9.0.0
• c7ee9ae Bump to [email protected] 🎉 ((Fix) Fix token's name max length poanetwork/token-wizard#676)
• 3ece549 Docs: Make the default parserOptions more explicit ((Bug) Multitier: Wallet address fields are empty for tiers #2,3,.. poanetwork/token-wizard#673)
• 0b36951 Add logical assignment plugin ((Bug) Unprecise value of total supply after modification of tier poanetwork/token-wizard#674)
• 5856ff5 Bump some devDeps
• 45938d9 build(deps): upgrade @ babel/* to 7.0.0-rc.2 ((Bug) Long token's name is overlapped with ticker's name poanetwork/token-wizard#668)
• bc97875 9.0.0-beta.3
• 74c5d62 update lock
• 6a45632 chore - fixing eslint-scope to a safe version; resolves (Feature) Indicate to user how many addresses were imported to the whitelist poanetwork/token-wizard#656. (how to withdraw remaining tokens unsold and ether desposit in crowdsale? poanetwork/token-wizard#657)
• e0119e0 9.0.0-beta.2
• 198964b Merge pull request (Bug) Unable to start deployment with low gas price poanetwork/token-wizard#645 from rubennorte/support-new-flow-syntax-in-scope-analysis

See the full diff

Package name: eslint-loader

The new version differs by 89 commits.

• e732cb5 chore(release): 4.0.2
• 7febae0 fix: use fs-extra ^8.1.0
• ba37e29 chore(release): 4.0.1
• acae2be refactor: new cache implementation ((Bug) Investment Transaction rejection not being handled properly poanetwork/token-wizard#320)
• c086892 chore(release): 4.0.0
• 1a12052 chore: v4.0.0 ((Feature) Add investment option without Metamask poanetwork/token-wizard#319)
• 6c6a87a chore(release): 3.0.4
• 953d140 test: jest setTimeout
• acecce6 chore: update deps
• d7be477 chore: update deps
• 796e3d1 fix: (Bug) Transaction runs out of gas during deployment step poanetwork/token-wizard#316 updating loader-fs-cache min version ((Suggestion) Use cross-env to avoid duplicating NPM scripts poanetwork/token-wizard#317)
• e04f743 chore: update lock files
• 929800d chore: add contributor
• 3f422bf docs: formatting
• 23695fc chore(release): 3.0.3
• ee68817 chore: update lock files
• c0a9d0c fix: support webpack 5 (Youtweakit favicon change poanetwork/token-wizard#312)
• 6bb1fa6 fix: check result object ((Bridge) isBreakingCap fix, combine-solidity windows support poanetwork/token-wizard#311)
• 7793ccf chore(package): update description
• f06c9e8 docs: update
• dab6d65 docs: clarify default cache location
• 356c8e2 chore: update deps
• 2346ff8 docs: formatting
• 2dd8b43 docs: formatting

See the full diff

Package name: extract-text-webpack-plugin

The new version differs by 11 commits.

• cc3ba94 chore(release): 3.0.2
• d5a1de2 fix: refer to the `entrypoint` instead of the first `module` (`module.identifier`) ((Feature) Get receipt call of last sent transaction, if user refreshes the page poanetwork/token-wizard#601)
• 5286ab2 build(defaults): update to v1.6.0 (how to reflect ethereum collected in ico and the tokens left in wordpress? poanetwork/token-wizard#652)
• 4cfde50 chore(release): 3.0.1
• 8de6558 fix: get real path from `__filename` instead of `__dirname` (`NS`)
• 510704f fix(index): stricter check for `shouldExtract !== wasExtracted` ((Fix) check isMined on error event poanetwork/token-wizard#605)
• 6a660f3 docs(README): update install instructions ((Fix) Add validation to Reserved tokens->Value poanetwork/token-wizard#570)
• 083a6c8 docs(README): add custom `[contenthash]` formats ((Fix) all steps are finished, but loader is not hidden poanetwork/token-wizard#566)
• d7a75fc chore(release): 3.0.0
• 7ae32d9 refactor: Apply webpack-defaults & webpack 3.x support ((Refactor) Exclude SafeMathLibExt creation for any crowdsale poanetwork/token-wizard#540)
• dd43832 fix: add missing `options.ignoreOrder` details in Error message ((Fix) UI bug when going from crowdsale to invest and back again poanetwork/token-wizard#539)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution
🦉 Command Injection