[Snyk] Fix for 17 vulnerabilities

[nawazdhandala]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - user-service/package.json - user-service/package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:-------------------------  | **619/1000**
**Why?** Has a fix available, CVSS 8.1 | Prototype Pollution
[SNYK-JS-AJV-584908](https://snyk.io/vuln/SNYK-JS-AJV-584908) | Yes | No Known Exploit  | **696/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.5 | Prototype Pollution
[SNYK-JS-ASYNC-2441827](https://snyk.io/vuln/SNYK-JS-ASYNC-2441827) | No | Proof of Concept  | **589/1000**
**Why?** Has a fix available, CVSS 7.5 | Arbitrary File Read
[SNYK-JS-HTMLPDF-467248](https://snyk.io/vuln/SNYK-JS-HTMLPDF-467248) | Yes | No Known Exploit  | **626/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 6.1 | Man-in-the-Middle (MitM)
[SNYK-JS-HTTPSPROXYAGENT-469131](https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131) | No | Proof of Concept  | **644/1000**
**Why?** Has a fix available, CVSS 8.6 | Prototype Pollution
[SNYK-JS-JSONSCHEMA-1920922](https://snyk.io/vuln/SNYK-JS-JSONSCHEMA-1920922) | Yes | No Known Exploit  | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-LODASH-1018905](https://snyk.io/vuln/SNYK-JS-LODASH-1018905) | No | Proof of Concept  | **681/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.2 | Command Injection
[SNYK-JS-LODASH-1040724](https://snyk.io/vuln/SNYK-JS-LODASH-1040724) | No | Proof of Concept  | **686/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.3 | Prototype Pollution
[SNYK-JS-LODASH-450202](https://snyk.io/vuln/SNYK-JS-LODASH-450202) | No | Proof of Concept  | **731/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.2 | Prototype Pollution
[SNYK-JS-LODASH-567746](https://snyk.io/vuln/SNYK-JS-LODASH-567746) | No | Proof of Concept  | **686/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.3 | Prototype Pollution
[SNYK-JS-LODASH-608086](https://snyk.io/vuln/SNYK-JS-LODASH-608086) | No | Proof of Concept  | **686/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.3 | Prototype Pollution
[SNYK-JS-LODASH-73638](https://snyk.io/vuln/SNYK-JS-LODASH-73638) | No | Proof of Concept  | **541/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 4.4 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-LODASH-73639](https://snyk.io/vuln/SNYK-JS-LODASH-73639) | No | Proof of Concept  | **506/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 3.7 | Prototype Pollution
[SNYK-JS-MINIMIST-2429795](https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795) | Yes | Proof of Concept  | **601/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.6 | Prototype Pollution
[SNYK-JS-MINIMIST-559764](https://snyk.io/vuln/SNYK-JS-MINIMIST-559764) | Yes | Proof of Concept  | **696/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.5 | Prototype Poisoning
[SNYK-JS-QS-3153490](https://snyk.io/vuln/SNYK-JS-QS-3153490) | Yes | Proof of Concept  | **751/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.6 | Arbitrary Code Execution
[SNYK-JS-THENIFY-571690](https://snyk.io/vuln/SNYK-JS-THENIFY-571690) | No | Proof of Concept  | **579/1000**
**Why?** Has a fix available, CVSS 7.3 | Prototype Pollution
[npm:extend:20180424](https://snyk.io/vuln/npm:extend:20180424) | Yes | No Known Exploit (*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: html-pdf

The new version differs by 15 commits.

• bac0f69 3.0.1
• c12d697 Invert localUrlAccess to fix https://www.npmjs.com/advisories/1095
• 7f054b6 Fix options.base example path to avoid #508
• 13b438c 3.0.0
• 296313e chore: Update circleci config
• 236a297 fix: Prevent local file access by default using the `localUrlAccess: false` option
• 85e2470 chore: Add package-lock.json
• 36a551c Fixed error handling
• 4e15719 Satisfying test for TravisCI
• 9349b6f Added null checker
• a0f4500 A better way for handling PhantomJS exits
• 9e14ef5 Fix issue with last header appearing on all pages
• 89a41e3 Extract business card test into separate file
• 63ba98f Re-add business card example pdf
• b0018c4 Fix two of three broken links

See the full diff

Package name: mailgun-js

The new version differs by 12 commits.

• ba44aef 0.22.0
• 106420e Add test mode (#225)
• 294843f Merge pull request #224 from petereitz/address215
• ba3a9d6 Update README.md
• 81e0d12 Merge pull request #222 from developedbyme/patch-1
• 1d02e8b Added note about EU region usage
• 5550948 Merge pull request #220 from captDaylight/patch-1
• 8371c5e typo
• 09c3c43 0.21.0
• 339ea2a update dependencies
• 81977d3 Update README.md
• e59794d Update README.md

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/oneuptime/project/adb12f84-3d7d-4b7a-956f-b13e7ecd0dc3?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/oneuptime/project/adb12f84-3d7d-4b7a-956f-b13e7ecd0dc3?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"350e53fc-54ca-4198-88ba-7dc04ce7b90b","prPublicId":"350e53fc-54ca-4198-88ba-7dc04ce7b90b","dependencies":[{"name":"html-pdf","from":"2.2.0","to":"3.0.1"},{"name":"mailgun-js","from":"0.20.0","to":"0.22.0"},{"name":"mongoose-session","from":"0.0.2","to":"0.0.4"},{"name":"request","from":"2.87.0","to":"2.88.2"}],"packageManager":"npm","projectPublicId":"adb12f84-3d7d-4b7a-956f-b13e7ecd0dc3","projectUrl":"https://app.snyk.io/org/oneuptime/project/adb12f84-3d7d-4b7a-956f-b13e7ecd0dc3?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-AJV-584908","SNYK-JS-ASYNC-2441827","SNYK-JS-HTMLPDF-467248","SNYK-JS-HTTPSPROXYAGENT-469131","SNYK-JS-JSONSCHEMA-1920922","SNYK-JS-LODASH-1018905","SNYK-JS-LODASH-1040724","SNYK-JS-LODASH-450202","SNYK-JS-LODASH-567746","SNYK-JS-LODASH-608086","SNYK-JS-LODASH-73638","SNYK-JS-LODASH-73639","SNYK-JS-MINIMIST-2429795","SNYK-JS-MINIMIST-559764","SNYK-JS-QS-3153490","SNYK-JS-THENIFY-571690","npm:extend:20180424"],"upgrade":["SNYK-JS-AJV-584908","SNYK-JS-ASYNC-2441827","SNYK-JS-HTMLPDF-467248","SNYK-JS-HTTPSPROXYAGENT-469131","SNYK-JS-JSONSCHEMA-1920922","SNYK-JS-LODASH-1018905","SNYK-JS-LODASH-1040724","SNYK-JS-LODASH-450202","SNYK-JS-LODASH-567746","SNYK-JS-LODASH-608086","SNYK-JS-LODASH-73638","SNYK-JS-LODASH-73639","SNYK-JS-MINIMIST-2429795","SNYK-JS-MINIMIST-559764","SNYK-JS-QS-3153490","SNYK-JS-THENIFY-571690","npm:extend:20180424"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["priorityScore"],"priorityScoreList":[619,696,589,626,644,586,681,686,731,686,686,541,506,601,696,751,579],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Prototype Pollution](https://learn.snyk.io/lesson/prototype-pollution/?loc=fix-pr) 🦉 [Regular Expression Denial of Service (ReDoS)](https://learn.snyk.io/lesson/redos/?loc=fix-pr) 🦉 [Command Injection](https://learn.snyk.io/lesson/malicious-code-injection/?loc=fix-pr)