[Snyk] Fix for 6 vulnerabilities

[CybrOlli3]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	No	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	No	No Known Exploit
	379/1000 Why? Has a fix available, CVSS 3.3	Insecure Credential Storage SNYK-JS-WEB3-174533	No	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: nunjucks

The new version differs by 7 commits.

• 53d1223 Release v3.2.1
• 93129bf Replace yargs with commander
• 17691da Chokidar bump
• 40dfdf0 Remove dead link
• cefb1cf Prevent optional dependency Chokidar from loading when not watching
• 1485a44 Add badges in README.md
• 2246457 Add Mozilla Code of Conduct file

See the full diff

Package name: solidity-bytes-utils

The new version differs by 41 commits.

• e93b867 Add deleted set of memory variables accidentally deleted with the last PR to master
• fa2792e Revert version constraints back to `^0.5.0` in order to enhance compatibility
• 425edac Merge branch 'master' into develop
• 7727420 Change truffle config file to always use the right compielr version
• 87e1c28 Add eth lint ([Snyk] Security upgrade nunjucks from 3.2.0 to 3.2.3 #30)
• 1b55da7 Revert "Publish to GitHub package manager"
• 0cfd42f Publish to GitHub package manager
• 8f91f5d Merge branch 'master' into develop
• e3d1f68 Fix for new truffle version breaking Codeship CI
• 8183d09 Merge branch 'master' into develop
• 5f91a80 Hotfix for correct EPM deployment
• cd17878 Bump version to 0.0.8
• 541c524 Update dependencies
• de03428 Merge branch 'master' into develop
• db88c30 Fix README with correct example of import from NPM
• 658e88b Implement toUintXX for 64, 96 and 128 bits ([Snyk] Security upgrade solidity-bytes-utils from 0.0.8 to 0.0.9 #25)
• 3222bc1 Fix typo in package-lock.json
• 40adf99 Merge branch 'master' into develop
• 5741a27 Update dependency versions
• e177b3b Bump version in package-lock.json
• 5670587 Bump version to v0.0.7
• 9df9e9b Update package-lock.json
• d942a00 (WIP) Upgrade to Solidity v0.5.0 ([Snyk] Security upgrade nunjucks from 3.2.0 to 3.2.4 #21)
• 4f5a1a9 Merge branch 'develop' of github.com:GNSPS/solidity-bytes-utils into develop

See the full diff

Package name: web3

The new version differs by 250 commits.

• 5b5bf87 changelog updates
• 45d55c3 version update
• 4358140 Release/4.0.1 rc.2 (#6152)
• cdc2835 fix canary auth (#6151)
• 55a4de1 add util polyfill (#6150)
• 45edf3d Canary releases (#6143)
• 01ce365 Proposal for rearranging docs (#6141)
• 86082bc skip '### Breaking Changes' section from unreleasedSection array (#6138)
• d60c285 Fix plugin example tests with `4.0.1-rc.1` (#6134)
• 88ac791 Correct and enhance documentation for subscribing to events (#6129)
• daaaff7 Autotype for contract methods (#6137)
• ab80131 support ESM builds (#6131)
• 6202d1e min build whitelisting (#6132)
• 7a924db migration guide update (#6130)
• 4f423fc Fix validation of nested tuples (#6125)
• 408332d fix!: remove non read-only ens methods (#6084)
• 8c5ea34 Providers Tutorial (#6095)
• f2abd6a Eth turorial (#6120)
• 210455a transaction integration tests (#6071)
• fe959a1 Contract options fix (#6118)
• bf1311f update docs so web is imported by default (#6112)
• 3b95b5e fix estimateGas to accept hex data without 0x prefix (#6103)
• 8c3a17b Add a tutorial for smart contract basic interaction (#6089)
• edc7a84 `defaultTransactionTypeParser` Refactor (#6102)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)
🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution