[Snyk] Fix for 1 vulnerabilities

[0racl3z]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-NODEFETCH-2964180	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: go-ipfs

The new version differs by 5 commits.

• 3fd83aa 0.9.0
• 9cb2a6a 0.9.0-rc2
• 2796cd0 0.9.0-rc1
• ab1d2b4 fix(ci): restore go-ipfs publishing to NPM (Build.sh assumes globally installed browserify ipfs/ipfs-desktop#37)
• 4c07d7c feat: cache and verify downloaded archive (Add settings menu and UI element to quit the app + Drag & Drop feature ipfs/ipfs-desktop#32)

See the full diff

Package name: ipfs-http-client

The new version differs by 33 commits.

• 3f407ae chore: publish
• 2b633f6 chore: update contributors
• a6bcad5 fix: types path for ipfs-core (#3356)
• b07f944 chore: add @ types/yargs for better inference (#3357)
• 16ecc74 fix: files ls should return string (#3352)
• 3250ff4 feat: enable custom formats for dag put and get (#3347)
• 4eb196c fix: do not double normalise input url (#3351)
• 33aa632 docs: clarify that mtime and mode are optional (#3302)
• 5cc6dfe fix: remove buffer export from ipfs-core (#3348)
• d27b6d1 chore: bundle size increased by 186B (#3344)
• 2bcc0af chore: run docker rc release separately (#3342)
• 3e7e222 docs: fixes "interface-ipfs-core" link (#3334)
• fdc19a4 fix: build before reinstalling example deps (#3341)
• 66f2081 chore: re-enable node 15 (#3339)
• e53d3f8 chore: build ipfs-core before ipfs during release (#3340)
• 6c06322 chore: disable node 15 until it can generate random numbers again
• bbcaf34 feat: type check & generate defs from jsdoc (#3281)
• 4b8021d feat: implement message-port ipfs.ls (#3322)
• 1ba0bf0 docs: fix typo (#3329)
• 7f32f7f feat: webui v2.11.4 (#3317)
• 3218067 chore: fix typo (#3320)
• 639d71f fix: use fetch in electron renderer and electron-fetch in main (#3251)
• 8e44e52 chore: update chromedriver (#3319)
• 2ff7ca5 chore: use eslint-config-ipfs (#3287)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.