[Snyk] Fix for 3 vulnerabilities

[codywalker77]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASHSET-1320032	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-TRIM-1017038	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: remark-rehype

The new version differs by 8 commits.

• b5e3ef3 6.0.0
• f18c8ec Update `mdast-util-to-hast`
• bfe0e7f Refactor prose
• 6267614 Update dev-dependencies
• 8233f0e Update metadata
• 801a046 Add `funding` field to `package.json`
• 47e547d Add notes on security
• 3b5a603 Update dev-dependencies

See the full diff

Package name: webpack-cli

The new version differs by 250 commits.

• fb50f76 chore(release): publish new version
• 2c75aeb chore: new version of the packages
• 0d05c30 chore(release): publish %s
• 3f9e151 chore: fix lerna config
• 2c1e34c tests(generator): enhance init generator tests (Is it possible to migrate an OAuth app to Github app without asking users to re-authenticate? github/docs#1236)
• 6ee61b9 Fix loader-generator and plugin-generator tests ($fuckchrisknight 041215663 1318664565848 github/docs#1250)
• 52956a2 Fixing the typos and grammatical errors in Readme files (content/rest/index.mdUpdate index.md github/docs#1246)
• 7faaed2 chore: update Bug_report & Feature_request Templates (Improve docs to be more explanatory github/docs#1256)
• 7a5b33d feat(webpack-cli): added mode argument (Explain how to use environment variables in a test matrix github/docs#1253)
• 3715756 tests(webpack-cli): add test case for defaults flag (Explain how to use environment variables in a test matrix github/docs#1254)
• a7cba2f chore: project maintanance and typescript fix (repo sync github/docs#1247)
• 7748472 chore: ignore package-lock.json and remove its references (Remove extraneous grammar period which breaks the compare URL github/docs#1252)
• a014aa7 docs: fix supported arguments & commands link in README (Dashboard github/docs#1244)
• 06129a1 feat(webpack-cli): add progress bar for progress flag (repo sync github/docs#1238)
• 6cc6a49 chore: post refactor CLI (Update restriction github/docs#1237)
• 358651e chore: move cli under lerna package (Update about-the-dependency-graph.md github/docs#1225)
• 2dc495a fix(init): fix webpack config scaffold (Avoid use branch for example workflows github/docs#1231)
• 1ab62d2 tests(generator): add tests for plugin generator (repo sync github/docs#1235)
• d2dd0c1 tests(sourcemap): fix flaky stats statement (SystemformNuch1991 github/docs#1232)
• f6dc680 tests(loader-generator): add tests for loader generator (Fix the table overflowing sidebar github/docs#1234)
• 35d1381 tests(generator): enable init generator test (index.md github/docs#1233)
• 66cdcb6 chore(generator): remove transpiled tests (Fixes #1190 github/docs#1229)
• f29a170 fix(init): fix the invalid package name (Issue: Improve existing docs github/docs#1228)
• 8c3a66d chore(cli): updated changelog of v3 (Add note that secret scanning endpoints should be able to handle larg… github/docs#1224)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Regular Expression Denial of Service (ReDoS)

[guardrails]

⚠️ We detected 1 security issue in this pull request:

Mode: paranoid | Total findings: 1 | Considered vulnerability: 1

Vulnerable Libraries (1)

Severity	Details
Critical	pkg:npm/[email protected] upgrade to: > 4.0.0

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.