[Snyk] Fix for 2 vulnerabilities

[ik226]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	630/1000 Why? Has a fix available, CVSS 8.1	Internal Property Tampering SNYK-JS-BSON-6056525	Yes	No Known Exploit
	619/1000 Why? Has a fix available, CVSS 8.1	Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-6056521	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: connect-mongo

The new version differs by 90 commits.

• 63ca966 docs: update readme and bump version to 3.0.0
• aceb1ee chore: bump version to 3.0.0-rc.2
• 0e4a234 test: add test cases on event listener
• e77a7f1 test: replace mocha with jest (fixes #243 - validates that donation is NaN on server freeCodeCamp/pantry-for-good#324)
• ad39e88 test: replace deprecated collection.insert to collection.insertOne
• 545c06e docs: update README on testing
• 2d5442e chore: upgrade depns mocha
• 5d3a321 chore: upgrade nyc depns
• 54cd91d chore: upgrade depns
• afb7a12 docs: remove some badges
• 6c2484b docs: update README for supporting version
• c925c92 test: fix test case
• 6827330 chore: bump version to 3.0.0-rc.1
• f62692b ci: update .npmignore
• aa2637d ci: remove node 6 support and add linting in travis
• 801291b fix linting error
• f928547 travis add test on Node 12
• 12275f0 better linting
• eb23b1e linting fix
• 66194c7 bump major version to 3.0.0-rc
• f29084f Wait for client open, before calling db. (Add istanbul test coverage freeCodeCamp/pantry-for-good#321)
• d252bfc Install Stale bot
• 15d91c1 Transparent crypto support (Improve UI for assigning customers to drivers freeCodeCamp/pantry-for-good#314)
• 08ccada Update readme refer to latest release to avoid confusion

See the full diff

Package name: copy-webpack-plugin

The new version differs by 56 commits.

• 0675847 chore(release): 5.0.5
• 9146c2a docs: fix typo (Added tests for EditUser. freeCodeCamp/pantry-for-good#401)
• 3103940 refactor: minor code refactor (Add unit tests for Media Helpers and Notification Sender files freeCodeCamp/pantry-for-good#399)
• c546871 perf: improvement for webpack@5 (Add unit tests for list API of customer controller freeCodeCamp/pantry-for-good#406)
• 5db376b chore(deps): update (Add unit tests for customer controller freeCodeCamp/pantry-for-good#409)
• 806eb41 docs: fix broken fragment links (Seed more customers and drivers and use fb-dev2 database freeCodeCamp/pantry-for-good#398)
• 6158483 chore(release): 5.0.4
• cd0e9f5 docs: clarify plugin description (Update README.md freeCodeCamp/pantry-for-good#395)
• f848140 test: refactor (Updated README file freeCodeCamp/pantry-for-good#394)
• ff0c736 refactor: tests (fix security vulnerabilities as suggested by npm install using npm audit fix --force freeCodeCamp/pantry-for-good#393)
• 7f08be6 fix: use posix separator for emitting assets (fix/375#1 Remove notifications when they are viewed freeCodeCamp/pantry-for-good#392)
• 89c73c8 chore(defaults): update (Include setWaypoints reducer in CustomerSelector freeCodeCamp/pantry-for-good#390)
• 0b61c86 docs: fix 'defined' typo in readme (Docker freeCodeCamp/pantry-for-good#384)
• 2f4dfec docs: update wording in README (Remove unused mapbox code freeCodeCamp/pantry-for-good#386)
• 4b5a6bf chore(defaults): update (remove unused withRouter from Sidebar freeCodeCamp/pantry-for-good#380)
• ec0e036 chore(release): 5.0.3
• de52b48 chore(defaults): update (Updated AdminLTE and made fixes according to update guide freeCodeCamp/pantry-for-good#376)
• 70917b7 fix: alone `[N]` interpolation in `to` option (Notifications freeCodeCamp/pantry-for-good#375)
• 95cf57e chore(release): 5.0.2
• ae2258f perf: avoid extra call `stat` for file (Fix error 'unathorized' while an user wants to 'Apply as a customer' freeCodeCamp/pantry-for-good#365)
• 94086af chore: remove unused deps ("Password should be longer" should be displayed to the user, in case, while trying to register a new membership freeCodeCamp/pantry-for-good#364)
• 52f8be6 fix: better determinate template in `to` option (How to run the tests correctly? freeCodeCamp/pantry-for-good#363)
• 3946473 fix: emit errors instead throw (Register as a customer shows not authorized from trying to get foods freeCodeCamp/pantry-for-good#362)
• 05963eb fix: add fallback to transform cache directory (Created Button to mark a Package As Received freeCodeCamp/pantry-for-good#361)

See the full diff

Package name: mongoose

The new version differs by 250 commits.

• 76fae6d chore: release 5.3.9
• 40d4177 Merge pull request #7213 from NewEraCracker/master
• 751397c fix(document): run setter only once when doing `.set()` underneath a single nested subdoc
• 10837d4 test(document): repro #7196
• 10a63a9 Bump version of bson dependency to match mongodb-core
• d10274e docs(transactions): add example of aborting a transaction
• d245847 Merge branch 'master' of github.com:Automattic/mongoose
• 551a75b chore: add cpc to some pages that were missing it
• 1ca3514 Merge pull request #7210 from gfranco93/patch-1
• c1606b6 Merge pull request #7207 from lineus/fix-7098
• e9d538e Merge pull request #7203 from lineus/fix-7202
• 8f16b67 fix(document): surface errors in subdoc pre validate
• 87005a1 test(document): repro #7187
• 5b1d81c Documentation fix: fixed anchor link
• eebfb36 docs(query): add note re: cursor()
• c1e2617 docs(query): improve find() docs re: #7188
• 526f82d fix(query): run default functions after hydrating the loaded document
• 320d5f8 test(query): repro #7182
• 64c6d15 if our update schema path is a nested array do not skip query casting.
• 5d122e8 test for #7098
• 5ba13a7 refactor(test): move strictQuery tests to query.test.js since they do not use findOneAndUpdate()
• 4121629 chore: refer to correct issue #7178
• 22ed5d2 fix(query): handle strictQuery: 'throw' with nested path correctly
• 8c16354 test(query): repro #7152

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)