[Snyk] Fix for 5 vulnerabilities #36

BitcoinOutput · 2023-11-28T23:48:59Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- libs/remix-debug/package.json

Vulnerabilities that will be fixed

With an upgrade:

Priority Score (*)	Issue	Breaking Change	Exploit Maturity
696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
679/1000 Why? Has a fix available, CVSS 9.3	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962463	Yes	No Known Exploit
646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	Yes	Proof of Concept
646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	Yes	Proof of Concept
586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @remix-project/remix-astwalker

The new version differs by 250 commits.

8d1e0c7 contine polling if contract address not available
8c90936 fix event subscribing walletconnect
b0e44b8 fix spamming the network
d4850df add try/catch and increase polling interval
3028b9f fix printing context values
a9a9f09 fix e2e test
49ec740 return error from gasEstimate if EvmError
1e9049d fix wallet connect
677bbfb add more type for safety
3d5aa36 language btn style changes
aabce09 fix encoding boolean
c1a5683 update Semaphore workspace readme
c9505ee change cursor to pointer for the dropdown
c61e6c2 fix text color for dropdown items
7162de3 fix dropdown issues
f94a982 tooltips while dragging
ae4e927 show tooltip on button
6c563c3 Ensure url is consistent for circom dev deps
3639634 updated contribution file
47c0021 Update README.md
68a226e Update README.md - Fix Discord invite link expiration
b68ee6d Rename helloWorld.sol to HelloWorld.sol
1e7516e update text
6fcb8e9 natspec

See the full diff

Package name: babel-eslint

The new version differs by 31 commits.

a0fbd50 8.0.2
2004b91 require correct deps
fa56d21 Always use unpad (Debugger: show error in UI when tx number is invalid ethereum/remix-project#535)
295091d Allow ^ version for babel dependencies (default generated file updated ethereum/remix-project#534)
d3b8519 fix(package): update babylon to version 7.0.0-beta.31 (Add e2e tests to check compiler configuration through URL ethereum/remix-project#533)
54ab4ac 8.0.1
c1a7882 Update README.md support (package.json removed from remix-ide directory ethereum/remix-project#531) [skip ci]
51100c9 chore(package): update mocha to version 4.0.0 (e2e case for the recorder: use more than one contract with multiple abis ethereum/remix-project#524)
5742b71 Adding optionalCatchBinding to plugins. (payload method console removed ethereum/remix-project#521)
905887c 8.0.0
49493e4 update to beta.0
42d0c5b Remove already fixed workaround (add a .remixignore file ethereum/remix-project#508)
25bd208 8.0.0-alpha.17
1468905 alpha.17
57c133e 8.0.0-alpha.15
1e41162 update (install remixd failed, looks like some depandency not installable ethereum/remix-project#504)
c31b577 Readme update usage section (servicesList[name][fn] is not a function ethereum/remix-project#501) [skip ci]
c2626f9 Update eslint to the latest version 🚀 (Why is there an undeclared dependency on npip? ethereum/remix-project#500)
3c6b2de chore(package): update husky to version 0.14.0 (remix-ide used the local compilier failed. ethereum/remix-project#498)
e052d5a Update install instructions to use latest stable release (Make Remixd compatible with Node.js 12 version ethereum/remix-project#497) [skip ci]
8e3e088 8.0.0-alpha.13
f757e22 Merge pull request can't install remixd on macos ethereum/remix-project#493 from danez/regression-test
5736be6 Update babylon
37f9242 Add Prettier (Broken tutorial (readthedocs) link in README.md ethereum/remix-project#491)

See the full diff

Package name: web3

The new version differs by 250 commits.

5b5bf87 changelog updates
45d55c3 version update
4358140 Release/4.0.1 rc.2 (#6152)
cdc2835 fix canary auth (#6151)
55a4de1 add util polyfill (#6150)
45edf3d Canary releases (#6143)
01ce365 Proposal for rearranging docs (#6141)
86082bc skip '### Breaking Changes' section from unreleasedSection array (#6138)
d60c285 Fix plugin example tests with `4.0.1-rc.1` (#6134)
88ac791 Correct and enhance documentation for subscribing to events (#6129)
daaaff7 Autotype for contract methods (#6137)
ab80131 support ESM builds (#6131)
6202d1e min build whitelisting (#6132)
7a924db migration guide update (#6130)
4f423fc Fix validation of nested tuples (#6125)
408332d fix!: remove non read-only ens methods (#6084)
8c5ea34 Providers Tutorial (#6095)
f2abd6a Eth turorial (#6120)
210455a transaction integration tests (#6071)
fe959a1 Contract options fix (#6118)
bf1311f update docs so web is imported by default (#6112)
3b95b5e fix estimateGas to accept hex data without 0x prefix (#6103)
8c3a17b Add a tutorial for smart contract basic interaction (#6089)
edc7a84 `defaultTransactionTypeParser` Refactor (#6102)