[Snyk] Fix for 6 vulnerabilities

[smarkussen19]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • goof/package.json
  • goof/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Internal Property Tampering SNYK-JS-BSON-561052	Yes	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-451341	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-1019388	No	No Known Exploit
	Insecure use of /tmp folder npm:cli:20160615	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:minimatch:20160620	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:ms:20170412	No	No Known Exploit

Commit messages

Package name: humanize-ms

The new version differs by 5 commits.

• d9cdffe Release 1.2.1
• c6da77c deps: ms@2
• 3b6f1ba fix: package.json to reduce vulnerabilities ([Snyk] Security upgrade tap from 11.1.3 to 15.0.0 #3)
• 51a95e8 Add license text ([Snyk] Fix for 11 vulnerabilities #2)
• 627c5c4 Release 1.2.0

See the full diff

Package name: marked

The new version differs by 123 commits.

• 26ae990 Release v0.7.0 ([Snyk(Unlimited)] Upgrade node-uuid from 1.4.0 to 1.4.8 snyk-fixtures/npm-lockfiles#1519)
• 204926c 0.7.0
• 15a6b4f 🗜️ minify [skip ci]
• 0ee3aa9 Merge pull request [Snyk(Unlimited)] Upgrade qs from 0.0.6 to 0.6.6 snyk-fixtures/npm-lockfiles#1515 from UziTech/link-label-security
• cc9efe4 🗜️ minify [skip ci]
• e987a4d fix tests
• ded5e24 update link
• 7faa999 add test
• ac1e57c use correct options in specs ([Snyk(Unlimited)] Upgrade color-convert from 1.9.2 to 1.9.3 snyk-fixtures/npm-lockfiles#1511)
• 63935f9 🗜️ minify [skip ci]
• 0276ad7 silent tests
• 1f4c17f Merge branch 'master' into spec-options
• 6bae3a2 Link parenthesis ([Snyk(Unlimited)] Upgrade verbosity from 0.9.2 to 0.10.1 snyk-fixtures/npm-lockfiles#1509)
• 2a1bbed Sanitize hardening ([Snyk(Unlimited)] Upgrade lodash from 4.17.10 to 4.17.15 snyk-fixtures/npm-lockfiles#1504)
• 59ec6fb fix calculation
• 2b63f3b add test
• b78e498 update deprecation warning
• 44dbeeb remove tables option
• d2e85d9 fix fences
• 7ed2692 fix testing with node 4
• 7bc6e3f add comment
• f478dfb move tables to gfm
• 8ccc1f1 improve paragraph
• ba2eedd improve lheading

See the full diff

Package name: mongoose

The new version differs by 250 commits.

• 76fae6d chore: release 5.3.9
• 40d4177 Merge pull request #7213 from NewEraCracker/master
• 751397c fix(document): run setter only once when doing `.set()` underneath a single nested subdoc
• 10837d4 test(document): repro #7196
• 10a63a9 Bump version of bson dependency to match mongodb-core
• d10274e docs(transactions): add example of aborting a transaction
• d245847 Merge branch 'master' of github.com:Automattic/mongoose
• 551a75b chore: add cpc to some pages that were missing it
• 1ca3514 Merge pull request #7210 from gfranco93/patch-1
• c1606b6 Merge pull request #7207 from lineus/fix-7098
• e9d538e Merge pull request #7203 from lineus/fix-7202
• 8f16b67 fix(document): surface errors in subdoc pre validate
• 87005a1 test(document): repro #7187
• 5b1d81c Documentation fix: fixed anchor link
• eebfb36 docs(query): add note re: cursor()
• c1e2617 docs(query): improve find() docs re: #7188
• 526f82d fix(query): run default functions after hydrating the loaded document
• 320d5f8 test(query): repro #7182
• 64c6d15 if our update schema path is a nested array do not skip query casting.
• 5d122e8 test for #7098
• 5ba13a7 refactor(test): move strictQuery tests to query.test.js since they do not use findOneAndUpdate()
• 4121629 chore: refer to correct issue #7178
• 22ed5d2 fix(query): handle strictQuery: 'throw' with nested path correctly
• 8c16354 test(query): repro #7152

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.