[Snyk] Fix for 21 vulnerabilities

[xhad]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-ANGULAR-534884	No	Proof of Concept
	464/1000 Why? Has a fix available, CVSS 5	Cross-site Scripting (XSS) SNYK-JS-ANGULAR-570058	No	No Known Exploit
	756/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.7	Cross-site Scripting (XSS) SNYK-JS-ANGULAR-572020	No	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	No	Proof of Concept
	706/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.7	Remote Memory Exposure SNYK-JS-BL-608877	No	Proof of Concept
	584/1000 Why? Has a fix available, CVSS 7.4	Regular Expression Denial of Service (ReDoS) SNYK-JS-HAWK-2808852	No	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	Yes	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-450202	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-73638	Yes	Proof of Concept
	541/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 4.4	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Poisoning SNYK-JS-QS-3153490	No	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Cross-site Scripting (XSS) npm:angular:20171018	No	Proof of Concept
	539/1000 Why? Has a fix available, CVSS 6.5	Cross-site Scripting (XSS) npm:angular:20180202	No	No Known Exploit
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution npm:hoek:20180212	Yes	Proof of Concept
	539/1000 Why? Has a fix available, CVSS 6.5	Timing Attack npm:http-signature:20150122	No	No Known Exploit
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution npm:lodash:20180130	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Override Protection Bypass npm:qs:20170213	No	No Known Exploit
	469/1000 Why? Has a fix available, CVSS 5.1	Remote Memory Exposure npm:request:20160119	No	No Known Exploit
	576/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.1	Uninitialized Memory Exposure npm:tunnel-agent:20170305	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: angular-translate

The new version differs by 155 commits.

• 445fb7b Also add project shutdown notice on documentation index
• 9cea502 Append changelog 2.19.1
• 15860bd Bump version
• 63622ab Append changelog 2.19.1
• c4e2c38 Merge branch 'canary'
• c17ba2a Add shutdown notice
• 1114534 Append changelog 2.19.0
• 6856fac Merge branch 'canary'
• 637473f Bump version
• 443a81f feat(service): add allowNamespace parameter Generating terms using a script elastic/kibana#1910
• d727abb Append changelog 2.18.4
• 6647051 Merge branch 'canary'
• 81ce733 Bump version
• 4bbbd6a chore(): update action fixing security issue
• c28ce75 feat(cookie storage): change samesite cookie policy from None to lax
• 207ee83 chore(readme): replace build badge with GitHub Actions
• f830f99 chore(readme): remove badges for "Code Climate" & "Code Coverage"
• 026674d chore(readme): replace build badge with GitHub Actions
• 23783b0 chore(readme): remove badges for "Code Climate" & "Code Coverage"
• 707b150 Merge branch 'feature/gh_actions' into canary
• 917ba92 chore(): add GitHub Actions
• 255590b Update package-lock
• ff607d6 Append changelog 2.18.3
• a20417b Merge branch 'canary'

See the full diff

Package name: elasticsearch

The new version differs by 163 commits.

• 9e68608 Bumped v16.7.3
• 9b00981 Merge pull request [Snyk] Security upgrade mathjs from 3.16.2 to 7.5.1 #44 from elastic/philkra-patch-3
• 930d77a Prepare readme for repo achiving
• 3a2d5e6 Merge pull request [Snyk] Fix for 1 vulnerabilities #43 from missinglink/patch-1
• 2354214 readme: fix broken link
• 8adc174 Merge pull request [Snyk] Security upgrade node-fetch from 1.3.2 to 2.6.1 #42 from elastic/philkra-patch-1
• 8cc8186 Update README.md
• 6e65a22 Reduce README to emphasise deprecation
• 8a6b5e6 [DOCS] Fix link for time units
• f47e806 [DOCS] Fix link for time units
• b885725 elastisearch.js is no longer maintained
• f9d81c6 Add missing period
• 0a20f9e Remove doc links
• 27c2cfb elastisearch.js is no longer maintained
• 7dc350f [DOCS] Fix broken links to synced flush API
• e484f46 [DOCS] Fix broken links to synced flush API
• f505170 nest changelog entries under level3 header to keep them on one page
• 8363940 version 16.7.2
• cd07536 default ssl ciphers to undefined for node 15.3 support
• 545609e update changelog
• 0f81719 version 16.7.1
• 317b77a [api] regenerate
• b5f2e30 restore older apiVersions
• f475fe6 version 16.7.0

See the full diff

Package name: vision

The new version differs by 206 commits.

• a4c143c 5.4.4
• 04f0afc Light linting
• 75c3836 Merge pull request Allow unit conversion of numeric fields elastic/kibana#172 from yuvke/master
• 3a41066 =Added tests for _bustRequireCache
• 7425d38 =bustRequireCache now a class method for Manager class
• 4aa103a Merge pull request Percentage display and label when over a hits elastic/kibana#174 from woutrbe/feature/update-pug-docs
• 68373dc Remove trailing commas
• 2e7c752 Add comments
• 908e6dd Update Pug documentation
• 187897e Some refactoring
• 8592b3b Merge pull request Properly display multiline values in table panel  elastic/kibana#173 from Nargonath/changelog
• 7860e7b Add changelog.md
• fd9a1f8 Comment capitalization
• 391efcf bustRequireCache now also removes refs from parent module
• 99b8a9b 5.4.3
• 673aa16 Use requirements config. Closes Memory leak in Map elastic/kibana#169
• 9d400a8 5.4.2
• ef05828 Update hoek. Closes Create a link to a search elastic/kibana#168
• 8fc9209 5.4.1
• 367613e Fix version again
• 44e4ede 5.5.0
• 5015c0f Fix version
• 48ce0a7 5.3.4
• 136eec5 node 11 + cleanup. Closes Added bettermap panel and plugin status messages elastic/kibana#167

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Cross-site Scripting (XSS)
🦉 Regular Expression Denial of Service (ReDoS)
🦉 More lessons are available in Snyk Learn