[Snyk] Fix for 1 vulnerabilities

[Omrisnyk]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • large-file/package.json
  • large-file/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity	Reachability
	213/1000 Why? Confidentiality impact: High, Integrity impact: None, Availability impact: None, Scope: Changed, Exploit Maturity: Proof of Concept, User Interaction (UI): Required, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.01055, Social Trends: No, Days since published: 0, Reachable: No, Transitive dependency: No, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 6.65, Likelihood: 3.19, Score Version: V5	Path Traversal SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555	Yes	Proof of Concept	No Path Found

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: karma-webpack

• 5.0.0 - 2021-02-02
  No content.
• 5.0.0-alpha.6 - 2021-01-30
  

  Bug Fixes

  • automatically fix missing webpack framework and report a warning (ea5dc8e)
  • fix an issue where multiple karma-webpack processes could not run in parallel (ea3dabe)
  • bump hotfix dependencies (98b3ec9)
• 5.0.0-alpha.5 - 2020-12-06
  

  Bug Fixes

  • change the webpack peer dependency to webpack v5 (2e0ca74)
• 5.0.0-alpha.4 - 2020-12-06
  

  Bug Fixes

  • fix compatibility issues for webpack v5 (8d7366f), closes #452
  • remove deprecation warning for .watch() (4fe1f60)
• 5.0.0-alpha.3.0 - 2019-03-07
• 5.0.0-alpha.2 - 2019-02-13
  

  chore(release): 5.0.0-alpha.2

• 5.0.0-alpha.1 - 2019-01-01
  

  chore(release): 5.0.0-alpha.1

• 5.0.0-alpha.0 - 2018-12-13
• 4.0.2 - 2019-06-08
  

  4.0.2 (2019-06-08)

  Bug Fixes

  • don't error when webpackMiddleware config not provided' (#418) (7570912)
• 4.0.1 - 2019-06-07
  

  4.0.1 (2019-06-07)

  Bug Fixes

  • package: point to dist instead of lib (#417) (c0a0d47)
• 4.0.0 - 2019-06-07
  

  4.0.0 (2019-06-07)

  Bug Fixes

  • karma-webpack: Regression in multi-compiler mode (#390) (#391) (63cfd78)

  chore

  • default: update (#412) (74e526f)

  BREAKING CHANGES

  • default: minimum required nodejs version is 8.9

from karma-webpack GitHub release notes

Package name: webpack-dev-middleware

• 5.3.4 - 2024-03-20
  

  5.3.4 (2024-03-20)

  Bug Fixes

  • security: do not allow to read files above (#1779) (189c4ac)
• 5.3.3 - 2022-05-18
  

  5.3.3 (2022-05-18)

  Bug Fixes

  • types for Request and Response (#1271) (eeb8aa8)
• 5.3.2 - 2022-05-17
• 5.3.1 - 2022-02-01
• 5.3.0 - 2021-12-16
• 5.2.2 - 2021-11-17
• 5.2.1 - 2021-09-25
• 5.2.0 - 2021-09-24
• 5.1.0 - 2021-09-09
• 5.0.0 - 2021-06-02
• 4.3.0 - 2021-05-19
• 4.2.0 - 2021-05-10
• 4.1.0 - 2021-01-15
• 4.0.4 - 2021-01-13
• 4.0.3 - 2021-01-12
• 4.0.2 - 2020-11-10
• 4.0.1 - 2020-11-09
• 4.0.0 - 2020-10-28
• 4.0.0-rc.3 - 2020-07-14
• 4.0.0-rc.2 - 2020-06-30
• 4.0.0-rc.1 - 2020-02-20
• 4.0.0-rc.0 - 2020-02-19
• 3.7.3 - 2020-12-15
• 3.7.2 - 2019-09-28
• 3.7.1 - 2019-09-03
• 3.7.0 - 2019-05-15
• 3.6.2 - 2019-04-03
• 3.6.1 - 2019-03-06
• 3.6.0 - 2019-02-19
• 3.5.2 - 2019-02-06
• 3.5.1 - 2019-01-17
• 3.5.0 - 2019-01-04
• 3.4.0 - 2018-09-24
• 3.3.0 - 2018-09-10
• 3.2.0 - 2018-08-23
• 3.1.3 - 2018-04-26

from webpack-dev-middleware GitHub release notes

Commit messages

Package name: karma-webpack

The new version differs by 38 commits.

• 46a5505 Merge branch 'master' into next
• 71fc63a fix(config): ignore entry options ([Snyk(Unlimited)] Upgrade qs from 0.0.6 to 0.6.6 snyk-fixtures/npm-lockfiles#479)
• 05cfa79 fix(docs): fixed warning inaccuracy ([Snyk(Unlimited)] Upgrade adm-zip from 0.4.7 to 0.4.13 snyk-fixtures/npm-lockfiles#478)
• 1598fa6 fix(config): force default output.filename ([Snyk(Unlimited)] Upgrade node-uuid from 1.4.0 to 1.4.8 snyk-fixtures/npm-lockfiles#477)
• d603679 change(readme): made minor adjustments ([Snyk(Unlimited)] Upgrade qs from 0.0.6 to 0.6.6 snyk-fixtures/npm-lockfiles#476)
• 5300200 refactor(*): break up into individual modules ([Snyk(Unlimited)] Upgrade color-convert from 1.9.2 to 1.9.3 snyk-fixtures/npm-lockfiles#474)
• 8ad09d1 fix(test): handle scenario test rejection ([Snyk(Unlimited)] Upgrade @thebespokepixel/es-tinycolor from 0.3.1 to 0.3.2 snyk-fixtures/npm-lockfiles#473)
• da86766 chore(release): 5.0.0-alpha.6
• 98b3ec9 chore(deps): bump hotfix dependencies ([Snyk(Unlimited)] Upgrade verbosity from 0.9.2 to 0.10.1 snyk-fixtures/npm-lockfiles#472)
• ea5dc8e fix(preprocess): auto fix missing webpack framework ([Snyk(Unlimited)] Upgrade @thebespokepixel/meta from 0.2.3 to 0.2.5 snyk-fixtures/npm-lockfiles#471)
• b044404 chore(test): refactored hash method into util ([Snyk(Unlimited)] Upgrade truwrap from 0.8.1 to 0.8.4 snyk-fixtures/npm-lockfiles#470)
• ea3dabe fix(controller): add entropy to default dir ([Snyk(Unlimited)] Upgrade sgr-composer from 0.5.0 to 0.5.3 snyk-fixtures/npm-lockfiles#469)
• 57b131e chore(test): fix testing on linux ([Snyk(Unlimited)] Upgrade term-ng from 0.8.1 to 0.8.5 snyk-fixtures/npm-lockfiles#468)
• 52ac365 chore(lint): fix linter settings ([Snyk(Unlimited)] Upgrade lodash from 4.17.10 to 4.17.15 snyk-fixtures/npm-lockfiles#467)
• 6369729 feat(ci): added github workflow for testing ([Snyk(Unlimited)] Upgrade qs from 0.0.6 to 0.6.6 snyk-fixtures/npm-lockfiles#464)
• e8ad372 chore(test): set up integration testing ([Snyk(Unlimited)] Upgrade qs from 0.0.6 to 0.6.6 snyk-fixtures/npm-lockfiles#461)
• f7af31f chore(readme): add next tag to install command
• 2cc5495 chore(readme): add info about webpack v5
• a300178 chore(release): 5.0.0-alpha.5
• 2e0ca74 chore(package): update peer dependency to webpack v5
• 2e2ca3f chore(release): 5.0.0-alpha.4
• 4fe1f60 chore(controller): change the webpack watch logic
• 8d7366f chore: fix support for webpack v5
• 3cc35b3 test(plugin): add tests to prevent some regressions ([Snyk(Unlimited)] Upgrade qs from 0.0.6 to 0.6.6 snyk-fixtures/npm-lockfiles#419)

See the full diff

Package name: webpack-dev-middleware

The new version differs by 250 commits.

• 86071ea chore(release): 5.3.4
• 189c4ac fix(security): do not allow to read files above ([Snyk(Unlimited)] Upgrade yargs from 11.1.0 to 11.1.1 snyk-fixtures/npm-lockfiles#1779)
• f3c62b8 chore(release): 5.3.3
• eeb8aa8 fix: types for `Request` and `Response` ([Snyk(Unlimited)] Upgrade color-convert from 1.9.2 to 1.9.3 snyk-fixtures/npm-lockfiles#1271)
• 1a45388 chore(release): 5.3.2
• b8fb945 chore(deps): memfs force update ([Snyk(Unlimited)] Upgrade verbosity from 0.9.2 to 0.10.1 snyk-fixtures/npm-lockfiles#1269)
• f88067d chore: update deps and ci ([Snyk(Unlimited)] Upgrade adm-zip from 0.4.7 to 0.4.13 snyk-fixtures/npm-lockfiles#1260)
• 7186318 chore(deps-dev): bump @ commitlint/cli
• 57c50ef ci: update `checkout`, `setup-node`, and `codecov` actions ([Snyk(Unlimited)] Upgrade truwrap from 0.8.1 to 0.8.4 snyk-fixtures/npm-lockfiles#1267)
• 840146a chore(deps-dev): bump @ babel/preset-env
• 10c12eb chore(deps-dev): bump del from 6.0.0 to 6.1.0 ([Snyk(Unlimited)] Upgrade lodash from 4.17.10 to 4.17.15 snyk-fixtures/npm-lockfiles#1264)
• d35413f chore(deps-dev): bump standard-version
• 990ee2f chore(deps-dev): bump @ types/node
• d68ab36 fix: node types ([Snyk(Unlimited)] Upgrade term-ng from 0.8.1 to 0.8.5 snyk-fixtures/npm-lockfiles#1195)
• 85d38da chore(deps-dev): bump @ babel/cli
• b4fb714 chore(deps-dev): bump eslint from 8.14.0 to 8.15.0 ([Snyk(Unlimited)] Upgrade qs from 0.0.6 to 0.6.6 snyk-fixtures/npm-lockfiles#1258)
• f0e8a64 chore(deps-dev): bump webpack from 5.72.0 to 5.72.1 ([Snyk(Unlimited)] Upgrade node-uuid from 1.4.0 to 1.4.8 snyk-fixtures/npm-lockfiles#1259)
• 79a4d39 chore(deps-dev): bump express from 4.18.0 to 4.18.1 ([Snyk(Unlimited)] Upgrade adm-zip from 0.4.7 to 0.4.13 snyk-fixtures/npm-lockfiles#1254)
• d817499 chore(deps-dev): bump @ babel/core
• c6d573c chore(deps-dev): bump @ babel/preset-env
• fa7a2fe chore(deps-dev): bump @ commitlint/cli
• ff6037f chore(deps-dev): bump @ commitlint
• b311726 chore(deps-dev): bump lint-staged from 12.4.0 to 12.4.1 ([Snyk(Unlimited)] Upgrade qs from 0.0.6 to 0.6.6 snyk-fixtures/npm-lockfiles#1249)
• a51135a chore(deps-dev): bump supertest from 6.2.2 to 6.2.3 ([Snyk(Unlimited)] Upgrade adm-zip from 0.4.7 to 0.4.13 snyk-fixtures/npm-lockfiles#1248)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Path Traversal