[Snyk] Fix for 3 vulnerabilities

[vasikarla-zz]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/react-dev-utils/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-EVENTSOURCE-2823375	No	Proof of Concept
	619/1000 Why? Has a fix available, CVSS 8.1	Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: chalk

The new version differs by 53 commits.

• 3fca615 2.0.0
• f66271e Add tagged template literal (Figure out why e2e script doesn't catch some issues facebook/create-react-app#163)
• 23ef1c7 fix linter errors
• c015568 add rainbow example
• 09fb2d8 Re-implement `chalk.enabled` (Contributing instructions step two facebook/create-react-app#160)
• 608242a spoof supports-color
• 18f2e7c add host information output
• 523b998 Revert "TEMPORARY: emergency travis CI fix (see comments)"
• 54975fb TEMPORARY: emergency travis CI fix (see comments)
• 1d73b21 Improve readme
• 6f4d6b3 Bump dependencies
• 8702496 Remove `chalk.styles`
• 0412cdf Minor code improvements
• 249b9ac ES2015ify the codebase
• cb3f230 Add RGB (256/Truecolor) support (Electron support facebook/create-react-app#140)
• dbae68d Update dependent package count in the readme (initial settings for editorconfig facebook/create-react-app#154)
• 9b60021 Drop support for Node.js 0.10 and 0.12
• 0d21449 check parent builder object for enabled status (Typescript Option facebook/create-react-app#142)
• 5a69476 add XO badge
• 492f11f add example file
• 4ce73b6 make XO happy
• 7c02cf4 Add log statement to chalk examples (Add missing semver dependency. facebook/create-react-app#129)
• 835ca3d You've just reached 10,000 dependent modules. (Typo fix facebook/create-react-app#122)
• 74c087d minor doc improvements (United init command for both React and React Native facebook/create-react-app#120)

See the full diff

Package name: sockjs-client

The new version differs by 38 commits.

• 7c158a2 1.2.0
• f4a6166 Add files to npmignore
• f1a667a Update build dependencies
• 41b0993 Update non-build deps
• 6c9c6b6 Change browser targest to latest of everything
• 121bdd9 Fix lint issues
• c848d85 Add browserstack logo to README
• 60f5599 Switch to karma and browserstack for running tests
• 841e035 Add package-lock.json
• 02038ab Update faye-websocket to 0.11.1
• 8063f83 Update eventsource to 1.0.5
• 2786e7b Update inherits to 2.0.3
• 5c8e773 Update debug to 3.1.0
• 8e764bb Update url-parse to 1.4.3
• 0ab53b8 Update Changelog
• c58872c 1.1.5
• 64a3be9 Update node version
• ebc3fdd Merge pull request add otf font format to loaders facebook/create-react-app#434 from rstoyanchev/patch-1
• 59a63eb Update README.md
• 436e997 Merge pull request Transparent png breaks loaders facebook/create-react-app#396 from SenYu/fix/http_in_https
• 4d18fd5 Merge pull request Easily Add an Babel Plugin facebook/create-react-app#411 from fafhrd91/patch-1
• 7d45bb8 Add link to rust server implementation
• 0d8627f Sauce Labs dropped support for a bunch of browsers
• 83fa471 Merge pull request multipackage monorepo base configuration facebook/create-react-app#405 from LukasDrgon/patch-1

See the full diff

Package name: strip-ansi

The new version differs by 3 commits.

• c299056 4.0.0
• 740dac9 Bump ansi-regex
• 0978944 Require Node.js 4

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Remote Code Execution (RCE)
🦉 Regular Expression Denial of Service (ReDoS)