16aa2ce Fixing response with utf-8 BOM can not parse to json (#2419)
c4300a8 Adding support for URLSearchParams in node (#1900)
See the full diff
Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the affected dependencies could be upgraded.
Check the changes in this PR to ensure they won't cause issues with your project.
------------
**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.*
For more information:
🧐 [View latest project report](https://app.snyk.io/org/johnsimerlink-github-marketplace/project/c37ff4c6-f480-459e-92e2-a738709f9da3?utm_source=github&utm_medium=referral&page=fix-pr)
🛠 [Adjust project settings](https://app.snyk.io/org/johnsimerlink-github-marketplace/project/c37ff4c6-f480-459e-92e2-a738709f9da3?utm_source=github&utm_medium=referral&page=fix-pr/settings)
📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities)
[//]: # (snyk:metadata:{"prId":"806948ba-d25d-437b-8837-b4246bf6f1ed","prPublicId":"806948ba-d25d-437b-8837-b4246bf6f1ed","dependencies":[{"name":"axios","from":"0.17.1","to":"0.21.1"},{"name":"firebase","from":"4.8.0","to":"7.14.0"},{"name":"snyk","from":"1.316.1","to":"1.996.0"}],"packageManager":"npm","projectPublicId":"c37ff4c6-f480-459e-92e2-a738709f9da3","projectUrl":"https://app.snyk.io/org/johnsimerlink-github-marketplace/project/c37ff4c6-f480-459e-92e2-a738709f9da3?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-AJV-584908","SNYK-JS-ANSIREGEX-1583908","SNYK-JS-BL-608877","SNYK-JS-FOLLOWREDIRECTS-2332181","SNYK-JS-FOLLOWREDIRECTS-2396346","SNYK-JS-FSTREAM-174725","SNYK-JS-GRPC-598671","SNYK-JS-HAWK-2808852","SNYK-JS-HOSTEDGITINFO-1088355","SNYK-JS-INFLIGHT-6095116","SNYK-JS-INI-1048974","SNYK-JS-JSONSCHEMA-1920922","SNYK-JS-JSZIP-1251497","SNYK-JS-JSZIP-3188562","SNYK-JS-LODASH-1018905","SNYK-JS-LODASH-1040724","SNYK-JS-LODASH-450202","SNYK-JS-LODASH-608086","SNYK-JS-LODASH-73638","SNYK-JS-LODASH-73639","npm:lodash:20180130","SNYK-JS-MINIMATCH-3050818","SNYK-JS-MINIMIST-2429795","SNYK-JS-MINIMIST-559764","SNYK-JS-PARSEURL-2935944","SNYK-JS-PARSEURL-2935947","SNYK-JS-PARSEURL-2936249","SNYK-JS-PARSEURL-2942134","SNYK-JS-QS-3153490","SNYK-JS-REQUEST-3361831","SNYK-JS-SEMVER-3247795","SNYK-JS-TAR-1536528","SNYK-JS-TAR-1536531","SNYK-JS-TAR-1536758","SNYK-JS-TAR-1579147","SNYK-JS-TAR-1579152","SNYK-JS-TAR-1579155","SNYK-JS-TAR-174125","SNYK-JS-TOUGHCOOKIE-5672873","npm:tough-cookie:20170905","SNYK-JS-Y18N-1021887","npm:debug:20170905","npm:deep-extend:20180409","npm:extend:20180424","npm:hoek:20180212","npm:ms:20170412","npm:protobufjs:20180305","npm:sshpk:20180409","npm:stringstream:20180511","SNYK-JS-LODASH-567746"],"upgrade":["SNYK-JS-AJV-584908","SNYK-JS-ANSIREGEX-1583908","SNYK-JS-BL-608877","SNYK-JS-FOLLOWREDIRECTS-2332181","SNYK-JS-FOLLOWREDIRECTS-2396346","SNYK-JS-FSTREAM-174725","SNYK-JS-GRPC-598671","SNYK-JS-HAWK-2808852","SNYK-JS-HOSTEDGITINFO-1088355","SNYK-JS-INFLIGHT-6095116","SNYK-JS-INI-1048974","SNYK-JS-JSONSCHEMA-1920922","SNYK-JS-JSZIP-1251497","SNYK-JS-JSZIP-3188562","SNYK-JS-LODASH-1018905","SNYK-JS-LODASH-1040724","SNYK-JS-LODASH-450202","SNYK-JS-LODASH-608086","SNYK-JS-LODASH-73638","SNYK-JS-LODASH-73639","SNYK-JS-MINIMATCH-3050818","SNYK-JS-MINIMIST-2429795","SNYK-JS-MINIMIST-559764","SNYK-JS-PARSEURL-2935944","SNYK-JS-PARSEURL-2935947","SNYK-JS-PARSEURL-2936249","SNYK-JS-PARSEURL-2942134","SNYK-JS-QS-3153490","SNYK-JS-REQUEST-3361831","SNYK-JS-SEMVER-3247795","SNYK-JS-TAR-1536528","SNYK-JS-TAR-1536531","SNYK-JS-TAR-1536758","SNYK-JS-TAR-1579147","SNYK-JS-TAR-1579152","SNYK-JS-TAR-1579155","SNYK-JS-TAR-174125","SNYK-JS-TOUGHCOOKIE-5672873","SNYK-JS-Y18N-1021887","npm:debug:20170905","npm:deep-extend:20180409","npm:extend:20180424","npm:hoek:20180212","npm:lodash:20180130","npm:ms:20170412","npm:protobufjs:20180305","npm:sshpk:20180409","npm:stringstream:20180511","npm:tough-cookie:20170905"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["priorityScore"],"priorityScoreList":[619,696,706,586,344,579,696,584,586,703,686,644,586,529,586,681,686,686,686,541,636,479,506,601,591,561,791,591,696,646,696,624,624,410,639,639,639,726,646,509,686,506,686,579,636,399,741,696,646,731],"remediationStrategy":"vuln"})
---
**Learn how to fix vulnerabilities with free interactive lessons:**
🦉 [Prototype Pollution](https://learn.snyk.io/lesson/prototype-pollution/?loc=fix-pr)
🦉 [Regular Expression Denial of Service (ReDoS)](https://learn.snyk.io/lesson/redos/?loc=fix-pr)
🦉 [Command Injection](https://learn.snyk.io/lesson/malicious-code-injection/?loc=fix-pr)
🦉 [More lessons are available in Snyk Learn](https://learn.snyk.io/?loc=fix-pr)
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user. #### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:-------------------------  | **619/1000****Why?** Has a fix available, CVSS 8.1 | Prototype Pollution
[SNYK-JS-AJV-584908](https://snyk.io/vuln/SNYK-JS-AJV-584908) | Yes | No Known Exploit  | **696/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.5 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-ANSIREGEX-1583908](https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908) | Yes | Proof of Concept  | **706/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.7 | Remote Memory Exposure
[SNYK-JS-BL-608877](https://snyk.io/vuln/SNYK-JS-BL-608877) | No | Proof of Concept  | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Information Exposure
[SNYK-JS-FOLLOWREDIRECTS-2332181](https://snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-2332181) | No | Proof of Concept  | **344/1000**
**Why?** Has a fix available, CVSS 2.6 | Information Exposure
[SNYK-JS-FOLLOWREDIRECTS-2396346](https://snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-2396346) | No | No Known Exploit  | **579/1000**
**Why?** Has a fix available, CVSS 7.3 | Arbitrary File Overwrite
[SNYK-JS-FSTREAM-174725](https://snyk.io/vuln/SNYK-JS-FSTREAM-174725) | Yes | No Known Exploit  | **696/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.5 | Prototype Pollution
[SNYK-JS-GRPC-598671](https://snyk.io/vuln/SNYK-JS-GRPC-598671) | Yes | Proof of Concept  | **584/1000**
**Why?** Has a fix available, CVSS 7.4 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-HAWK-2808852](https://snyk.io/vuln/SNYK-JS-HAWK-2808852) | Yes | No Known Exploit  | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-HOSTEDGITINFO-1088355](https://snyk.io/vuln/SNYK-JS-HOSTEDGITINFO-1088355) | No | Proof of Concept  | **703/1000**
**Why?** Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.2 | Missing Release of Resource after Effective Lifetime
[SNYK-JS-INFLIGHT-6095116](https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116) | Yes | Proof of Concept  | **686/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.3 | Prototype Pollution
[SNYK-JS-INI-1048974](https://snyk.io/vuln/SNYK-JS-INI-1048974) | Yes | Proof of Concept  | **644/1000**
**Why?** Has a fix available, CVSS 8.6 | Prototype Pollution
[SNYK-JS-JSONSCHEMA-1920922](https://snyk.io/vuln/SNYK-JS-JSONSCHEMA-1920922) | Yes | No Known Exploit  | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Denial of Service (DoS)
[SNYK-JS-JSZIP-1251497](https://snyk.io/vuln/SNYK-JS-JSZIP-1251497) | No | Proof of Concept  | **529/1000**
**Why?** Has a fix available, CVSS 6.3 | Arbitrary File Write via Archive Extraction (Zip Slip)
[SNYK-JS-JSZIP-3188562](https://snyk.io/vuln/SNYK-JS-JSZIP-3188562) | No | No Known Exploit  | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-LODASH-1018905](https://snyk.io/vuln/SNYK-JS-LODASH-1018905) | Yes | Proof of Concept  | **681/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.2 | Command Injection
[SNYK-JS-LODASH-1040724](https://snyk.io/vuln/SNYK-JS-LODASH-1040724) | Yes | Proof of Concept  | **686/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.3 | Prototype Pollution
[SNYK-JS-LODASH-450202](https://snyk.io/vuln/SNYK-JS-LODASH-450202) | Yes | Proof of Concept  | **686/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.3 | Prototype Pollution
[SNYK-JS-LODASH-608086](https://snyk.io/vuln/SNYK-JS-LODASH-608086) | Yes | Proof of Concept  | **686/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.3 | Prototype Pollution
[SNYK-JS-LODASH-73638](https://snyk.io/vuln/SNYK-JS-LODASH-73638) | Yes | Proof of Concept  | **541/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 4.4 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-LODASH-73639](https://snyk.io/vuln/SNYK-JS-LODASH-73639) | Yes | Proof of Concept  | **479/1000**
**Why?** Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-MINIMATCH-3050818](https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818) | Yes | No Known Exploit  | **506/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 3.7 | Prototype Pollution
[SNYK-JS-MINIMIST-2429795](https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795) | Yes | Proof of Concept  | **601/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.6 | Prototype Pollution
[SNYK-JS-MINIMIST-559764](https://snyk.io/vuln/SNYK-JS-MINIMIST-559764) | Yes | Proof of Concept  | **591/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.4 | Cross-site Scripting (XSS)
[SNYK-JS-PARSEURL-2935944](https://snyk.io/vuln/SNYK-JS-PARSEURL-2935944) | No | Proof of Concept  | **561/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 4.8 | Information Exposure
[SNYK-JS-PARSEURL-2935947](https://snyk.io/vuln/SNYK-JS-PARSEURL-2935947) | No | Proof of Concept  | **791/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 9.4 | Server-side Request Forgery (SSRF)
[SNYK-JS-PARSEURL-2936249](https://snyk.io/vuln/SNYK-JS-PARSEURL-2936249) | No | Proof of Concept  | **591/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.4 | Cross-site Scripting (XSS)
[SNYK-JS-PARSEURL-2942134](https://snyk.io/vuln/SNYK-JS-PARSEURL-2942134) | No | Proof of Concept  | **696/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.5 | Prototype Poisoning
[SNYK-JS-QS-3153490](https://snyk.io/vuln/SNYK-JS-QS-3153490) | Yes | Proof of Concept  | **646/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 6.5 | Server-side Request Forgery (SSRF)
[SNYK-JS-REQUEST-3361831](https://snyk.io/vuln/SNYK-JS-REQUEST-3361831) | Yes | Proof of Concept  | **696/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.5 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-SEMVER-3247795](https://snyk.io/vuln/SNYK-JS-SEMVER-3247795) | Yes | Proof of Concept  | **624/1000**
**Why?** Has a fix available, CVSS 8.2 | Arbitrary File Overwrite
[SNYK-JS-TAR-1536528](https://snyk.io/vuln/SNYK-JS-TAR-1536528) | Yes | No Known Exploit  | **624/1000**
**Why?** Has a fix available, CVSS 8.2 | Arbitrary File Overwrite
[SNYK-JS-TAR-1536531](https://snyk.io/vuln/SNYK-JS-TAR-1536531) | Yes | No Known Exploit  | **410/1000**
**Why?** Has a fix available, CVSS 3.7 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-TAR-1536758](https://snyk.io/vuln/SNYK-JS-TAR-1536758) | Yes | No Known Exploit  | **639/1000**
**Why?** Has a fix available, CVSS 8.5 | Arbitrary File Write
[SNYK-JS-TAR-1579147](https://snyk.io/vuln/SNYK-JS-TAR-1579147) | Yes | No Known Exploit  | **639/1000**
**Why?** Has a fix available, CVSS 8.5 | Arbitrary File Write
[SNYK-JS-TAR-1579152](https://snyk.io/vuln/SNYK-JS-TAR-1579152) | Yes | No Known Exploit  | **639/1000**
**Why?** Has a fix available, CVSS 8.5 | Arbitrary File Write
[SNYK-JS-TAR-1579155](https://snyk.io/vuln/SNYK-JS-TAR-1579155) | Yes | No Known Exploit  | **726/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.1 | Arbitrary File Overwrite
[SNYK-JS-TAR-174125](https://snyk.io/vuln/SNYK-JS-TAR-174125) | Yes | Proof of Concept  | **646/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 6.5 | Prototype Pollution
[SNYK-JS-TOUGHCOOKIE-5672873](https://snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873) | Yes | Proof of Concept  | **686/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.3 | Prototype Pollution
[SNYK-JS-Y18N-1021887](https://snyk.io/vuln/SNYK-JS-Y18N-1021887) | Yes | Proof of Concept  | **506/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 3.7 | Regular Expression Denial of Service (ReDoS)
[npm:debug:20170905](https://snyk.io/vuln/npm:debug:20170905) | Yes | Proof of Concept  | **686/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.3 | Prototype Pollution
[npm:deep-extend:20180409](https://snyk.io/vuln/npm:deep-extend:20180409) | Yes | Proof of Concept  | **579/1000**
**Why?** Has a fix available, CVSS 7.3 | Prototype Pollution
[npm:extend:20180424](https://snyk.io/vuln/npm:extend:20180424) | Yes | No Known Exploit  | **636/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 6.3 | Prototype Pollution
[npm:hoek:20180212](https://snyk.io/vuln/npm:hoek:20180212) | Yes | Proof of Concept  | **636/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 6.3 | Prototype Pollution
[npm:lodash:20180130](https://snyk.io/vuln/npm:lodash:20180130) | Yes | Proof of Concept  | **399/1000**
**Why?** Has a fix available, CVSS 3.7 | Regular Expression Denial of Service (ReDoS)
[npm:ms:20170412](https://snyk.io/vuln/npm:ms:20170412) | Yes | No Known Exploit  | **741/1000**
**Why?** Mature exploit, Has a fix available, CVSS 7.1 | Regular Expression Denial of Service (ReDoS)
[npm:protobufjs:20180305](https://snyk.io/vuln/npm:protobufjs:20180305) | Yes | Mature  | **696/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.5 | Regular Expression Denial of Service (ReDoS)
[npm:sshpk:20180409](https://snyk.io/vuln/npm:sshpk:20180409) | Yes | Proof of Concept  | **646/1000**
**Why?** Mature exploit, Has a fix available, CVSS 5.2 | Uninitialized Memory Exposure
[npm:stringstream:20180511](https://snyk.io/vuln/npm:stringstream:20180511) | Yes | Mature  | **509/1000**
**Why?** Has a fix available, CVSS 5.9 | Regular Expression Denial of Service (ReDoS)
[npm:tough-cookie:20170905](https://snyk.io/vuln/npm:tough-cookie:20170905) | Yes | No Known Exploit (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: axios
The new version differs by 250 commits.- a64050a Releasing 0.21.1
- d57cd97 Updating changelog for 0.21.1 release
- 8b0f373 Use different socket for Win32 test (#3375)
- e426910 Protocol not parsed when setting proxy config from env vars (#3070)
- c7329fe Hotfix: Prevent SSRF (#3410)
- f472e5d Adding a type guard for `AxiosError` (#2949)
- 7688255 Remove the skipping of the `socket` http test (#3364)
- 820fe6e Updating axios in types to be lower case (#2797)
- 94ca24b Releasing 0.21.0
- 2130a0c Updating changelog for 0.21.0 release
- fbdc150 Lock travis to not use node v15 (#3361)
- 3a8b87d Fixing an issue that type 'null' and 'undefined' is not assignable to validateStatus when typescript strict option is enabled (#3200)
- 9a78465 Revert "Fixing overwrite Blob/File type as Content-Type in browser. (#1773)" (#3289)
- 6d05b96 Fix typos (#3309)
- fa36737 fix axios.delete ignores config.data (#3282)
- b7e954e Fixing node types (#3237)
- 04d45f2 Fixing requestHeaders.Authorization (#3287)
- e8c6e19 docs: Fix simple typo, existant -> existent (#3252)
- 0d87655 Releasing 0.20.0
- cd27741 Updating changelog for 0.20.0 release
- ffea034 Releasing 0.20.0-0
- fe147fb Updating changlog for 0.20.0 beta release
- 16aa2ce Fixing response with utf-8 BOM can not parse to json (#2419)
- c4300a8 Adding support for URLSearchParams in node (#1900)
See the full diff