[Snyk] Fix for 4 vulnerabilities

[YuriGor]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:-------------------------  | **696/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.5 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-ANSIREGEX-1583908](https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908) | No | Proof of Concept  | **686/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.3 | Prototype Pollution
[SNYK-JS-NCONF-2395478](https://snyk.io/vuln/SNYK-JS-NCONF-2395478) | No | Proof of Concept  | **714/1000**
**Why?** Has a fix available, CVSS 10 | Cross-site Scripting (XSS)
[SNYK-JS-REMARKHTML-1583433](https://snyk.io/vuln/SNYK-JS-REMARKHTML-1583433) | Yes | No Known Exploit  | **619/1000**
**Why?** Has a fix available, CVSS 8.1 | Remote Code Execution (RCE)
[SNYK-JS-SHELLQUOTE-1766506](https://snyk.io/vuln/SNYK-JS-SHELLQUOTE-1766506) | Yes | No Known Exploit (*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: next

The new version differs by 250 commits.

• 99abb8b v12.0.2
• 9828790 v12.0.2-canary.14
• 39283f1 Update swc (#30685)
• 02e0dbc v12.0.2-canary.13
• 8a6307f Remove isCommonJS check as it has been moved to next-swc (#30677)
• 622a1a5 Provide default fallback _document and _app for for concurrent mode (#30642)
• c12ae5e correct Next.js 11 upgrade instructions (#30665)
• 90fad00 v12.0.2-canary.12
• 4ada314 Add auto-commonjs and update swc (#30661)
• d8cb8c5 Fixed "Expected jsx identifier" error on TypeScript generics & angle bracket type assertions in .ts files (#30619)
• d7d1a05 Ensure native binary is available for release stats (#30649)
• 77e1565 remove Object.fromEntries polyfill for node 10 in test utils (#30657)
• 48874f1 Fix missing dev option for the middleware SSR loader (#30639)
• c730f73 v12.0.2-canary.11
• 18a3991 Fix check compiled step (#30645)
• 097fb3c Revert incremental config to fix missing types (#30644)
• aa70f46 v12.0.2-canary.10
• 599081a Update output tracing to do separate passes (#30637)
• f363cc8 update webpack (#30634)
• b5a8916 Chore/rust workflow (#30577)
• c03e284 make sure "webpack" exists in the repo for typings (#30371)
• c53eaac v12.0.2-canary.9
• 142af81 Relax warning for `next/image` loader width even more (#30624)
• 842a130 Update to latest shell-quote (#30621)

See the full diff

Package name: remark-html

The new version differs by 9 commits.

• 2133d20 13.0.2
• b0b1ba5 Fix to sanitize by default
• c0b2f69 13.0.1
• 7a8cb0e Update `mdast-util-to-hast`
• bdeeee5 13.0.0
• efa1a5a Update docs
• 0b1cd0a Change to comply to CommonMark
• 5fec432 Update dev-dependencies
• db1a1d0 Add Discussions

See the full diff

Package name: snyk

The new version differs by 250 commits.

• 3f52bdc Merge pull request #1669 from snyk/fix/dont-fail-on-request-big-payload
• 47e106e fix: don't fail on request's big payload
• 1228b55 Merge pull request #1624 from snyk/chore/cli-alert-improvement
• fccd907 Merge pull request #1666 from snyk/chore/bump-cpp-test-timeout
• 6772a3e Merge pull request #1649 from snyk/chore/deps-update
• 89a7767 chore: update dependencies
• eaf4915 test: wrap pagerduty await in try-catch, remove condition
• 0576431 test: add pagerduty, check if test is running before attemmpting rerun
• a08a938 chore: bump flaky cpp test timeout
• ebb8dd7 Merge pull request #1656 from snyk/feat/protect-prime-time
• 69cd590 test: fix flakey json output test
• 3021bb2 Merge pull request #1663 from snyk/fix/upgrade-snyk-gradle-plugin
• a988600 Merge pull request #1654 from snyk/feat/iac-experimental-terraform-support
• b455497 feat: iac experimental tf support
• 4848b7e chore: run tests in packages in CI
• 3e7e99e feat: implement snyk protect
• bb233f1 chore: enable prettier formatting in packages
• fe0183d test: enable jest testing in snyk-protect workspace
• 40ec817 test: test fixture for snyk protect
• 7dfd3ea Merge pull request #1661 from snyk/test/fix-flake-with-dev-count-analysis
• 02c99b8 test: remove tests previously migrated to jest
• e203fd1 test: set timeout in beforeAll
• d42f6d9 fix: update snyk-gradle-plugin to 3.13.2
• 8cd9fbf Merge pull request #1662 from snyk/test/add-longer-timeouts

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/yurigor/project/cc1459a6-41eb-4585-9add-bf2a954348cb?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/yurigor/project/cc1459a6-41eb-4585-9add-bf2a954348cb?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"7635873f-e6d1-4f7c-8fdf-d7185e3d0962","prPublicId":"7635873f-e6d1-4f7c-8fdf-d7185e3d0962","dependencies":[{"name":"next","from":"9.5.2","to":"12.0.2"},{"name":"remark-html","from":"12.0.0","to":"13.0.2"},{"name":"snyk","from":"1.385.0","to":"1.465.0"}],"packageManager":"npm","projectPublicId":"cc1459a6-41eb-4585-9add-bf2a954348cb","projectUrl":"https://app.snyk.io/org/yurigor/project/cc1459a6-41eb-4585-9add-bf2a954348cb?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-ANSIREGEX-1583908","SNYK-JS-NCONF-2395478","SNYK-JS-REMARKHTML-1583433","SNYK-JS-SHELLQUOTE-1766506"],"upgrade":["SNYK-JS-ANSIREGEX-1583908","SNYK-JS-NCONF-2395478","SNYK-JS-REMARKHTML-1583433","SNYK-JS-SHELLQUOTE-1766506"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["priorityScore"],"priorityScoreList":[696,686,714,619]}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Prototype Pollution](https://learn.snyk.io/lessons/prototype-pollution/javascript?loc=fix-pr) 🦉 [Cross-site Scripting (XSS)](https://learn.snyk.io/lessons/xss/javascript?loc=fix-pr) 🦉 [Remote Code Execution (RCE)](https://learn.snyk.io/lessons/malicious-code-injection/javascript?loc=fix-pr)

[vercel[bot]]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Updated
deepdash.io	❌ Failed (Inspect)		Jun 22, 2022 at 7:42AM (UTC)