[Snyk] Fix for 1 vulnerabilities

[GTVolk]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	713/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.4	Prototype Pollution SNYK-JS-JSON5-3182856	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @svgr/webpack

The new version differs by 94 commits.

• f02acb4 v5.3.0
• b2214b7 Merge pull request External API - Execute Command does not work jitsi/jitsi-meet#415 from gregberge/upgrade-deps
• 0946fae test: fix flaky test
• 75d21e1 chore: upgrade dependencies
• c380147 Merge pull request Add features to enable easy troubleshooting jitsi/jitsi-meet#414 from gregberge/typescript-support
• 30362db test: update snapshots
• e0947c6 docs: document index template
• 4596d7b feat: add typescript option
• c5430f9 fix(cli): remove confusion between {keep,ignore}-existing (offer audio-only option jitsi/jitsi-meet#413)
• f2b2367 fix(svgo): support any SVGO config format (fixed switching to large video from FF on Safari jitsi/jitsi-meet#412)
• 853db4e fix(parcel-plugin): support "parcel" and "parcel-bundler"
• 928ee77 chore(deps): bump acorn from 5.7.3 to 5.7.4 (Is Jitsi Meet end-to-end encrypted? jitsi/jitsi-meet#409)
• 8b2129b v5.2.0
• 388acea refactor: migrate to import * as React from 'react' (Jitsi Install review November 2015 jitsi/jitsi-meet#401)
• 5a90553 chore(deps-dev): bump codecov from 3.6.1 to 3.6.5 (Callstats error reporting jitsi/jitsi-meet#399)
• 88110b6 fix: verify that `svgoConfig.plugins` is an array (Use persistent human readable usernames for callstats jitsi/jitsi-meet#397)
• 96966eb docs: update CLI options + small website fix (How to build jitsi-meet and jitsi-meet-prosody debian package jitsi/jitsi-meet#393)
• dd89778 docs: update contributors link (Conversation 'admin' should not be able to UN-mute users jitsi/jitsi-meet#394)
• d09bcd5 feat(parcel-plugin): replace `parcel-bundler` with `parcel` ([Information] Where is the css that control the size of the remote videos? jitsi/jitsi-meet#387)
• f620bea docs(website): add SSR Setup to SVGR Inside section (Trouble accessing mic/cam or entering room (logs included) jitsi/jitsi-meet#389)
• b806841 chore(opencollective): Loadable -> SVGR
• 1700dba v5.1.0
• c9d2dfc fix: fix merging svgo plugins in config (No audio/video  jitsi/jitsi-meet#384)
• fd120d1 feat: add Svg prefix to exports that starts with a number (Room name validation jitsi/jitsi-meet#383)

See the full diff

Package name: css-loader

The new version differs by 34 commits.

• 7857d8f chore(release): 4.0.0
• 5604205 feat: support `file:` protocol
• 5303db2 chore(deps): update (Suspended detection jitsi/jitsi-meet#1131)
• 9aa0549 chore(deps): update
• a54c955 test: imports
• 5b45d87 test: support in `@ import` at-rule
• 83515fa refactor: code
• 1c20b1e fix: parsing
• 7f49a0a feat: `@ value` supports importing `url()` (fix: Use a separate css class for thumbnail menu jitsi/jitsi-meet#1126)
• 791fff3 refactor: named export (Fixed problem with resizing thumb avatars jitsi/jitsi-meet#1125)
• 01e8c76 refactor: change function arguments of the `import` option (javascript Uncaught TypeError: Cannot read property 'addEventListener' of null jitsi/jitsi-meet#1124)
• c153fe6 refactor: improve schema options (Logs pinned/unpinned events jitsi/jitsi-meet#1123)
• 58b4b98 test: unresolved (Thumbnail calculations jitsi/jitsi-meet#1122)
• d2f6bd2 refactor: getLocalIdent function (Hides all side panels before showing new one. jitsi/jitsi-meet#1121)
• 069dbb0 refactor: the `modules.localsConvention` option was renamed to the `modules.exportLocalsConvention` option (Error installed jicofo jitsi/jitsi-meet#1120)
• fc04401 refactor: the `modules.context` option was renamed to the `modules.localIdentContext` option (Errors when installing jitsi-meeting jitsi/jitsi-meet#1119)
• 3a96a3d refactor: the `hashPrefix` option was renamed to the `localIdentHashPrefix` option (key and cert invalid + conference focus error jitsi/jitsi-meet#1118)
• 0080f88 refactor: default values `modules` and `module.auto` are true (Fixes casing of the tokendata directory. jitsi/jitsi-meet#1117)
• e1c55e4 refactor: rename the `onlyLocals` option (Adds a property to hide display name and disable update view. jitsi/jitsi-meet#1116)
• ac5f413 refactor: code
• a5c1b5f test: code coverange (Log the page reload from one place jitsi/jitsi-meet#1114)
• 908ecee refactor: `esModule` option is `true` by default (Fix clean js from styles 1 jitsi/jitsi-meet#1111)
• 7cca035 test: coverange (Tipsy proposal jitsi/jitsi-meet#1112)
• bc19ddd feat: improve `url()` resolving algorithm

See the full diff

Package name: imports-loader

The new version differs by 14 commits.

• ebfc6ad chore(release): 1.0.0
• 574b5f6 refactor: `wrapper` option (Auto-focus when someone is talking jitsi/jitsi-meet#78)
• c7f8799 fix: respect 'use strict' (remove workaround for ice/dtls update bug jitsi/jitsi-meet#77)
• 9e2cec4 refactor: code
• 7265bc8 refactor: options for commonjs
• bef708f refactor: code
• 754baa8 chore: defaults update (typo jitsi/jitsi-meet#73)
• 94fda1f ci: test Node.js 6, 8, 10 and 11 (Add link to the script + security information jitsi/jitsi-meet#69)
• a3ac1c5 chore(release): 0.8.0
• bd999b4 chore(package): rm `yarn.lock`
• 7ac98f8 chore(package): update `source-map` v0.5.6...0.6.1 (Participate without calling getUserMedia at the beginning jitsi/jitsi-meet#59)
• abea1c2 docs(README): update to webpack 2 syntax (RTCP FIR for keyframes jitsi/jitsi-meet#51)
• 8cffbbb docs(README): link to webpack 2 docs (Extra colibri channels allocated jitsi/jitsi-meet#49)
• 44d6f48 feat: allow loading nested objects onto existing libraries ([Snyk] Security upgrade @types/react-native-video from 5.0.14 to 5.0.19 #45)

See the full diff

Package name: style-loader

The new version differs by 112 commits.

• 171a747 chore(release): 1.1.4
• af1b4a9 chore(deps): update
• a003f05 docs: add links for the options table (Google Chrome ignores VIDEO_LAYOUT_FIT setting (from interface_config.js) jitsi/jitsi-meet#460)
• 2756e03 chore(release): 1.1.3
• 236b243 fix: injection algorithm (do not use xmpp module in API module jitsi/jitsi-meet#456)
• 36bd8f1 docs: fix typos (TRACK_REMOVED event not getting triggered for remote users on lib-jitsi-meet jitsi/jitsi-meet#453)
• de38c39 chore(release): 1.1.2
• 91ceaf2 fix: algorithm for importing modules (Stop using the polyfill when assigning it anyway jitsi/jitsi-meet#449)
• 1138ed7 fix: checking that the list of modules is an array (callstats AppID/AppSecret name alignment in config jitsi/jitsi-meet#448)
• aa418dd chore(release): 1.1.1
• 7ee8b04 fix: add empty default export for `linkTag` value
• c69ea6c chore(release): 1.1.0
• c7d6e3a fix: order of imported styles (added "start muted" to lib-jitsi-meet jitsi/jitsi-meet#443)
• a283b30 test: more manual test (Lib-jitsi-meet imrovements jitsi/jitsi-meet#442)
• 3415266 feat: `esModule` option (refactoring of Etherpad and Prezi jitsi/jitsi-meet#441)
• 907aed8 test: refactor (Lib-jitsi-meet imrovements jitsi/jitsi-meet#440)
• 28e1628 refactor: code (Getting attachEvent error when using Safari with Temasys Plugin jitsi/jitsi-meet#438)
• 5c51b90 refactor: cjs (Add methods related to external authentication jitsi/jitsi-meet#437)
• 609263a test: refactor
• 7768fce chore(release): 1.0.2
• dcbfadb fix: support ES module syntax (Fix German language typo. jitsi/jitsi-meet#435)
• d515edc chore(deps): update (Improve lib-jitsi-meet usability jitsi/jitsi-meet#434)
• 4c1e3f3 docs: fixed typo 'doom' to 'DOM' in README.md (Firefox 42.0/Ubuntu 15.10 struggling jitsi/jitsi-meet#432)
• c6164d5 chore(release): 1.0.1

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

[github-actions]

This PR has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.