[Snyk] Upgrade zotero-plugin from 1.4.2 to 1.4.19

[snyk-bot]

Snyk has created this PR to upgrade zotero-plugin from 1.4.2 to 1.4.19.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 16 versions ahead of your current version.
• The recommended version was released 20 days ago, on 2023-04-10.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-XMLDOMXMLDOM-3042243	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Improper Input Validation SNYK-JS-XMLDOMXMLDOM-3092934	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: zotero-plugin

• 1.4.19 - 2023-04-10
  

  1.4.19

• 1.4.18 - 2023-04-10
  

  1.4.18

• 1.4.17 - 2023-03-14
  

  1.4.17

• 1.4.16 - 2023-03-14
  

  1.4.16

• 1.4.15 - 2023-03-13
  

  1.4.15

• 1.4.14 - 2023-03-13
  

  1.4.14

• 1.4.12 - 2023-02-07
  

  1.4.12

• 1.4.11 - 2022-12-28
  

  1.4.11

• 1.4.10 - 2022-12-15
  

  1.4.10

• 1.4.9 - 2022-12-15
• 1.4.8 - 2022-09-15
• 1.4.7 - 2022-08-16
• 1.4.6 - 2022-07-27
• 1.4.5 - 2022-06-17
• 1.4.4 - 2022-06-17
• 1.4.3 - 2022-06-01
• 1.4.2 - 2022-05-09

from zotero-plugin GitHub release notes

Commit messages

Package name: zotero-plugin

• 40a5d35 1.4.19
• 61179c3 fs-extra
• 7a444b3 1.4.18
• d963c8f cleanup
• 7c0e229 prep for 6/7 client builds
• 001c316 prep for 6/7 client builds
• d47c294 peggy update
• 6e22613 prep for yo 6/7 generator
• da8dc5b prep for yo 6/7 generator
• e5ccb31 1.4.17
• fc01d61 cleanup
• 3aa03b5 1.4.16
• c5edfb6 jszip is flaky
• 3bd4a23 jszip is flaky
• 561c3b2 jszip flaky
• 969feca publish through action
• 7cc7134 1.4.15
• 911e85d 1.4.14
• 22dea13 glob update
• bb9f70d 1.4.13
• eaa0b75 jszip can generate a blob
• 0b65360 1.4.12
• 37c3ab7 ncu
• aecce86 1.4.11

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs