[Snyk] Security upgrade parse-server from 2.3.2 to 2.8.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • appengine/parse-server/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	711/1000 Why? Recently disclosed, Has a fix available, CVSS 8.5	Arbitrary File Write SNYK-JS-TAR-1579147	No	No Known Exploit
	711/1000 Why? Recently disclosed, Has a fix available, CVSS 8.5	Arbitrary File Write SNYK-JS-TAR-1579152	No	No Known Exploit
	711/1000 Why? Recently disclosed, Has a fix available, CVSS 8.5	Arbitrary File Write SNYK-JS-TAR-1579155	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: parse-server

The new version differs by 250 commits.

• 8fe3265 Release 2.8.0 (#4767)
• 95550f4 Making response.error accept a Parse.Error object as parameter (#4695)
• fc47f9b issue(afterFind): Fixes issue when using afterFind with relations (#4752)
• c0f86ae Adding Mongodb element to add `arrayMatches` the #4762 (#4766)
• ad244d6 feature: User Lockout (#4749)
• bfd0c4b chore(package): update cross-env to version 5.1.5 (#4757)
• d36c7c7 chore(package): update uws to version 10.148.0 (#4758)
• 1023267 fix(package): update body-parser to version 1.18.3 (#4763)
• c0e3672 New query condition support to match all strings that starts with some other given strings (improvement: Refactor for compute samples and tests GoogleCloudPlatform/nodejs-docs-samples#3864)
• 2c357df Fix typo: "requrest" -> "request" (#4761)
• 3999de7 Update issue templates
• a3e5b20 Bumps @ parse/simple-mailgun-adapter (#4753)
• bb16414 fix(package): update mime to version 2.3.1 (#4721)
• 0b69700 chore(package): update flow-bin to version 0.71.0 (#4746)
• ac2695e chore(package): update deep-diff to version 1.0.0 (#4733)
• 098d085 fix(package): update request to version 2.85.0 (#4745)
• a1f5f37 upgrading pg-promise to 8.4.0 (#4736)
• d48b30c fix(package): update mongodb to version 3.0.7 (#4732)
• 3b5dff1 chore(package): update bcrypt to version 2.0.1 (#4735)
• fad7b46 chore: Fixes issue related to flow types (#4724)
• 04588bc Allow creation of indices on default fields (#4738)
• b1017ac Send version for Vkontakte API (#4725)
• ebf65bf Updates @ parse/push-adapter (#4723)
• 22801d2 Ensure we respond with invalid password even if email is unverified (#4708)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic