[Snyk] Security upgrade express from 4.18.1 to 4.19.2

[andrewmkrug]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - yarn.lock #### Note for [zero-installs](https://yarnpkg.com/features/zero-installs) users If you are using the Yarn feature [zero-installs](https://yarnpkg.com/features/zero-installs) that was introduced in Yarn V2, note that this PR does not update the `.yarn/cache/` directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run `yarn` to update the contents of the `./yarn/cache` directory. If you are not using zero-install you can ignore this as your flow should likely be unchanged. #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:-------------------------  | **591/1000**
**Why?** Recently disclosed, Has a fix available, CVSS 6.1 | Open Redirect
[SNYK-JS-EXPRESS-6474509](https://snyk.io/vuln/SNYK-JS-EXPRESS-6474509) | No | No Known Exploit (*) Note that the real score may have changed since the PR was raised. Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/andrewmkrug/project/98bd958c-4903-436a-adba-05c4cc99b92a?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/andrewmkrug/project/98bd958c-4903-436a-adba-05c4cc99b92a?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"77befb5d-b0f0-499e-8c78-7929488613f0","prPublicId":"77befb5d-b0f0-499e-8c78-7929488613f0","dependencies":[{"name":"express","from":"4.18.1","to":"4.19.2"}],"packageManager":"yarn","projectPublicId":"98bd958c-4903-436a-adba-05c4cc99b92a","projectUrl":"https://app.snyk.io/org/andrewmkrug/project/98bd958c-4903-436a-adba-05c4cc99b92a?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-EXPRESS-6474509"],"upgrade":["SNYK-JS-EXPRESS-6474509"],"isBreakingChange":false,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","priorityScore"],"priorityScoreList":[591],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Open Redirect](https://learn.snyk.io/lesson/open-redirect/?loc=fix-pr)

[github-actions[bot]]

Hi andrewmkrug! Thank you for contributing to Dashy! ✨

When updating dependencies, take a moment to verify that there are not security issues associated with any added or modified packages. If adding a new dependency, ensure that it is totally necessary, and check the packages size is not too large, as this will increase overall bundle size.

---

I'm a bot, and this is an automated comment 🤖

[github-actions[bot]]

yarn.lock changes

Click to toggle table visibility

| Name | Status | Previous | Current | | :- | :-: | :-: | :-: | | `body-parser` | [](#) | 1.20.0 | 1.20.2 | | `content-type` | [](#) | 1.0.4 | 1.0.5 | | `cookie` | [](#) | 0.5.0 | 0.6.0 | | `express` | [](#) | 4.18.1 | 4.19.2 | | `qs` | [](#) | 6.10.3 | 6.11.0 | | `raw-body` | [](#) | 2.5.1 | 2.5.2 |

[netlify[bot]]

✅ Deploy Preview for peppy-choux-edbc1e ready!

Name	Link
🔨 Latest commit	f61be13745fec25f55ed3be2b37837ec254f4768
🔍 Latest deploy log	https://app.netlify.com/sites/peppy-choux-edbc1e/deploys/66031639276166000802b59d
😎 Deploy Preview	https://deploy-preview-143--peppy-choux-edbc1e.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[socket-security[bot]]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/cookie@0.6.0	None	0	23.7 kB	dougwilson
npm/express@4.19.2	environment, filesystem, network Transitive: eval, unsafe	+35	1.01 MB	wesleytodd

🚮 Removed packages: npm/express@4.18.1

View full report↗︎

[github-actions[bot]]

This PR is stale because it has been open 6 weeks with no activity. Either remove the stale label or comment below with a short update, otherwise this PR will be closed in 5 days.

[github-actions[bot]]

This pull request was automatically closed because it has been stalled for over 6 weeks with no activity.