[Snyk] Fix for 17 vulnerabilities

[bumplzz69]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	679/1000 Why? Has a fix available, CVSS 9.3	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962463	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	Yes	Proof of Concept
	429/1000 Why? Has a fix available, CVSS 4.3	Reverse Tabnabbing SNYK-JS-ISTANBULREPORTS-2328088	Yes	No Known Exploit
	641/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.4	Prototype Pollution SNYK-JS-JSON5-3182856	Yes	Proof of Concept
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Validation Bypass SNYK-JS-KINDOF-537849	Yes	Proof of Concept
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Prototype Pollution SNYK-JS-MINIMIST-2429795	Yes	Proof of Concept
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-MINIMIST-559764	Yes	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	Yes	No Known Exploit
	539/1000 Why? Has a fix available, CVSS 6.5	Improper Input Validation SNYK-JS-XMLDOM-1534562	Yes	No Known Exploit
	639/1000 Why? Has a fix available, CVSS 8.5	Prototype Pollution SNYK-JS-XMLDOM-3042242	Yes	No Known Exploit
	811/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 9.8	Improper Input Validation SNYK-JS-XMLDOM-3092935	Yes	Proof of Concept
	469/1000 Why? Has a fix available, CVSS 5.1	Denial of Service (DoS) npm:mem:20180117	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: jest

The new version differs by 250 commits.

• 343532a v26.0.0
• 075854a chore: update changelog for release
• 68b65af v26.0.0-alpha.2
• d30a586 fix: disallow hook definitions in tests ([Android] Implement ScrollView sticky headers on Android facebook/react-native#9957)
• 3375ac3 chore: remove unused prettier uninstall step from CI
• 0a63d40 fix: absolute path moduleNameMapper + jest.mock issue ([Android] Release build crashes immediately upon starting facebook/react-native#8727)
• 03dbb2f chore: fix watch mode test with utimes (fs operation timeout facebook/react-native#9967)
• 68d12d5 chore: skip broken test on windows (WebView JS Error: undefined is not an object (evaluating '_this.props') facebook/react-native#9966)
• e8e8146 align circus with jasmine's top-to-bottom execution order (TabBarIOS.Item will not ignore tintColor even with renderAsOriginal facebook/react-native#9965)
• 968a301 Fix invalid re-run of tests in watch mode (Correct activity request code facebook/react-native#7347)
• 5d1be03 chore: fix windows CI (FIX #9617 - Correct find local IP address when running on iOS device facebook/react-native#9964)
• 2bac04f v26.0.0-alpha.1
• c665f22 feat: add `createMockFromModule` to replace `genMockFromModule` (Remove duplicate call delegate->moduleNames() facebook/react-native#9962)
• 8147af1 chore: improve error on module not found (first row becomes sticky if renderHeader return empty array facebook/react-native#9963)
• 71631f6 feat: add new 'modern' implementation of Fake Timers ([showcase] Add Ticketea facebook/react-native#7776)
• d7f3427 chore: rename LolexFakeTimers to ModernFakeTimers (TextInput won't clear onKeyPress facebook/react-native#9960)
• 2c7682c Update index.js (need to require PropTypes to use it facebook/react-native#9095)
• 5a16415 docs: Updated Testing Frameworks guide with React; make it generic (Android,RN0.30 WebView Render Error facebook/react-native#9106)
• 4216b86 updated docs regarding testSequencer (Title is not vertically centered in <Navigator.NavigationBar> when using custom height facebook/react-native#9174)
• 2e8f8d5 fix: handle `null` being passed to `createTransformer` (Remove version from "line to delete" since we no longer use versions. facebook/react-native#9955)
• 7a3c997 jest-circus: throw if a test / hook is defined asynchronously ([Android] Use the JavaScript Engine of React Native to execute JavaScript code facebook/react-native#8096)
• 42f920c chore: update ts-eslint (Prevent "Enter" key action facebook/react-native#9953)
• 3078172 Updated config docs with default transform value (Linking.addEventListener passes the url and not an Object e.g. {'url':'example://whatever'} for Android facebook/react-native#8583)
• b6052e0 Update jest-phabricator documentation ([iOS 7.1.2][0.29.0] RCTPushNotificationManager throws NSInvalidArgumentException [UIConcreteLocalNotification category] facebook/react-native#8662)

See the full diff

Package name: jest-junit

The new version differs by 30 commits.

• 47650f5 Merge pull request [Snyk] Security upgrade yeoman-environment from 1.5.3 to 2.0.0 #82 from palmerj3/v6.2.0
• 3c2cb50 v6.2.0
• b669bbe Merge pull request [Snyk] Security upgrade jest from 24.0.0-alpha.6 to 24.0.0 #81 from palmerj3/upgradeJest
• 6f270c0 Remove jest-config
• d00e122 chore: install babel-jest on CI to avoid hoisting bugs
• 62ac24e Upgrade jest, jest-config, jest-validate to 24
• 9882c33 Merge pull request [Snyk] Fix for 3 vulnerabilities #79 from palmerj3/6.1.0
• 7dda343 v6.1.0
• 860f7ef Merge pull request [Snyk] Fix for 2 vulnerabilities #72 from lalugeo/master
• 3a82918 removed package.lock
• 3da1128 Merge pull request [Snyk] Fix for 1 vulnerabilities #76 from palmerj3/v6.0.1
• 6dc1a65 v6.0.1
• 49d30fd Merge pull request [Snyk] Fix for 1 vulnerabilities #75 from jest-community/revert-71-file-attr
• b026223 Revert "Add file attr"
• 8d070d8 using node-xml for generating prolog
• 43695d7 Merge pull request [Snyk] Fix for 2 vulnerabilities #73 from palmerj3/v6
• dee72c0 updated readme
• 010be8d removed options, hardcoded prolog
• 95db481 v6.0.0
• 0fb5aec Merge pull request [Snyk] Fix for 2 vulnerabilities #71 from mtsmfm/file-attr
• fdde81b * fix bug in xml prolog
• 6653fb8 * final output writing added with prolog
• 8ab3d6a Add file attr
• 8e3205f Merge pull request [Snyk] Security upgrade jest from 24.0.0-alpha.6 to 24.0.0 #70 from mtsmfm/fix-filepath

See the full diff

Package name: plist

The new version differs by 23 commits.

• 5e0d06e 3.0.4
• fa8e184 inline xmldom@0.6.0 to avoid false positive security message. Fixes Bump minimist from 1.2.0 to 1.2.6 #110, [Snyk] Security upgrade jest from 24.0.0-alpha.6 to 24.0.0 #111
• a0bd0d0 3.0.3
• dfb43f4 Merge pull request [Snyk] Fix for 1 vulnerabilities #109 from minhnguyen0712/master
• 5af9758 ⬆️ Bump xmldom
• 5877ec7 remove flaky saucelabs testing status badge
• 276c657 3.0.2
• 9b6af11 revert mocha because newer versions don't run on node versions this old
• e828f84 update deps
• e7b0394 removing safari because I can't get it to run in sauce with zuul
• c33edbe try an older version of safari
• 1f13bd7 revert sauce connect
• 6fa1022 specify specific tunnel id for sauce
• ee3c545 revert zuul dependency to see if that fixes saucelabs build
• e538eb4 reduce travis testing matrix size
• eb28b45 adding sauceconnect to see if that solves the local tunnel problem
• 3a8004a update saucelabs credentials in travis file
• 56c5a74 travis: revert config
• eaf1ca7 move saucelabs credentials to travis env variables
• eaf1af8 update minor deps
• 3821f55 update travis config to fix all warnings
• 9ec848e update sauce labs integration using my account
• af45b08 give credit to sauce labs for providing free open source testing resources

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution
🦉 Validation Bypass
🦉 More lessons are available in Snyk Learn