[Snyk] Fix for 2 vulnerabilities

[sirinartk]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • exchange/package.json
  • exchange/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	No	Proof of Concept
	753/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: bitfinex-api-node

The new version differs by 81 commits.

• 542e574 Merge pull request option mutally disable another one ? askmike/gekko#384 from f3rno/feature-release-final-2.0.0
• ee7156f (fix) tests for increased max socket limit
• 91d8596 (feature) bump channel limit to 250 per socket
• 171f8c7 (release) update CHANGELOG, bump manifest to 2.0.0
• 1c484b1 Merge pull request time taken for profit simulator and paper trader askmike/gekko#382 from f3rno/fix-ob-raw-checksum
• b490706 Merge pull request feature request: access multiple exchange in one strategy. askmike/gekko#383 from f3rno/fix-info-models
• 268ecc9 (fix/feature) add FundingInfo model, fix MarginInfo model
• 3103619 (fix) comment; array sort is maintained on update
• 2c8487c (fix) convert exp OB prices to fixed for checksum
• d7db37e Merge pull request Web frontend for Gekko askmike/gekko#380 from f3rno/fix-trades-payload-event-name
• 520a9a0 (fix) raw order book entry sorting on update
• d24392c (fix) clear packet WD on test end in ws2 unit
• 46af211 (fix) eventName resolution in trades handler
• 1b1c1f3 Merge pull request Importing from poloniex - Cannot read property 'date' of undefined askmike/gekko#379 from f3rno/fix-skip-auth-seq-error-n
• 96c114a (fix) skip auth seq # for error notifications w/ test
• ba888a1 Merge pull request Commit e41ff50 breaks bitfinex. askmike/gekko#376 from f3rno/feature-ws-mux
• 1a2f9b3 Merge pull request Gettin this error in v0.3.1 askmike/gekko#378 from f3rno/fix-model-bool-unserialize
• eadb9ff (fix) model tests to catch bool key handling bug
• 52dee63 (test) socket 'subscribed' event internal behavior
• 0e76e62 (fix) typo in unsubscribed test
• 09ed072 (fix) find -> findIndex in unsub listener
• cfbef7b (refactor) emit sub/unsub events before internal behaviors
• 5ade818 (refactor) increase max listener limit on manager/ws2
• 29c7e65 (fix) boolFields key in model unserialize

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. If you feel this is very a important issue please reach out the maintainer of this project directly via e-mail: gekko at mvr dot me.