[Snyk] Upgrade nunjucks from 3.2.3 to 3.2.4

[snyk-bot]

Snyk has created this PR to upgrade nunjucks from 3.2.3 to 3.2.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released a month ago, on 2023-04-13.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Cross-site Scripting (XSS) SNYK-JS-NUNJUCKS-5431309	626/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.1	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: nunjucks

• 3.2.4 - 2023-04-13
  

  What's Changed

  • fix: html encode backslashes if used with escape filter or autoescape by @ fdintino in #1437. Fixes CVE-2023-2142
    (bugzilla #1825980)

  Full Changelog: v3.2.3...v3.2.4

• 3.2.3 - 2021-02-15
  
  • Add support for nested attributes on sort filter; respect throwOnUndefined if sort attribute is undefined.
  • Add base arg to int filter.
  • Move chokidar to peerDependencies and mark it optional in peerDependenciesMeta.
  • Fix prototype pollution issue for template variables. Merge of #1330; fixes #1331. Thanks ChenKS12138!

from nunjucks GitHub release notes

Commit messages

Package name: nunjucks

• 86a77f4 Release v3.2.4
• ec16d21 fix: html encode backslashes if used with escape filter or autoescape ((doc) showEnd config MagicMirrorOrg/MagicMirror#1437)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs