[Snyk] Fix for 14 vulnerabilities

[richarajpal]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • docs/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	616/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.9	Server-Side Request Forgery (SSRF) SNYK-JS-AXIOS-1038255	No	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-1579269	No	Proof of Concept
	676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1	Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459	No	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-COLORSTRING-1082939	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	Yes	Proof of Concept
	484/1000 Why? Has a fix available, CVSS 5.4	Open Redirect SNYK-JS-GOT-2932019	No	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-HTMLMINIFIER-3091181	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-HTTPCACHESEMANTICS-3248783	No	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Improper Input Validation SNYK-JS-POSTCSS-5926692	Yes	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	No	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	Yes	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) npm:ssri:20180214	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: css-loader

The new version differs by 80 commits.

• 634ab49 chore(release): 2.0.0
• 6ade2d0 refactor: remove unused file (autosize not working JedWatson/react-select#860)
• e7525c9 test: nested url ([Enhancement] Add menuRenderer prop to support windowing for large lists JedWatson/react-select#859)
• 7259faa test: css hacks (Feature request: allow option value to be set to an object JedWatson/react-select#858)
• 5e6034c feat: allow to filter import at-rules (Question: Using Multi Option for Drop Down JedWatson/react-select#857)
• 5e702e7 feat: allow filtering urls (Programmatically focus select component JedWatson/react-select#856)
• 9642aa5 test: css stuff (handleMouseLeave fix JedWatson/react-select#855)
• 3338656 fix: reduce number of require for url (Compatible to IE version of the？ JedWatson/react-select#854)
• 533abbe test: issue 636 (feat(Option): support addition className JedWatson/react-select#853)
• 08c551c refactor: better warning on invalid url resolution (Select.Async not loading? JedWatson/react-select#852)
• b0aa159 test: issue menu does not close when check other place JedWatson/react-select#589 (Tabindex property needed JedWatson/react-select#851)
• f599c70 fix: broken unucode characters (How to focus hidden input? JedWatson/react-select#850)
• 1e551f3 test: issue 286 (Fix IE11 issue where focus is lost when scrolling through options JedWatson/react-select#849)
• 419d27b docs: improve readme (In IE11 the focus of the select field is lost when scrolling through the list of options JedWatson/react-select#848)
• d94a698 refactor: webpack-default (Fix issue with value object not being passed to handleRequired JedWatson/react-select#847)
• b97d997 feat: schema options
• 453248f fix: support module resolution in composes (Warning: Use the defaultValue or value props on <select> instead of setting selected on <option> JedWatson/react-select#845)
• 8a6ea10 refactor: postcss plugins (Adding cascade support JedWatson/react-select#844)
• fdcf687 fix: url resolving logic (Update README.md JedWatson/react-select#843)
• 889dc7f feat: allow to disable css modules and disable their by default (searchText prop not showing prop value when isloading=true JedWatson/react-select#842)
• ee2d253 test: importLoaders option (Breaking error in IE 8 JedWatson/react-select#841)
• 1dad1fb feat: reuse postcss ast from other loaders (i.e `postcss-loader`) (Fix scrollMenuIntoView option JedWatson/react-select#840)
• fe94ebc test: icss reserved keywords (fix(docs): update the propType for placeholder JedWatson/react-select#839)
• 9eaba66 refactor: migrate on message api for postcss-icss-plugin (Pressing tab when allowcreate, the value is cleared JedWatson/react-select#838)

See the full diff

Package name: html-webpack-plugin

The new version differs by 139 commits.

• eb73905 chore(release): 4.0.0
• 42a6d4a Add typing for getHooks
• a1a37cf Release html-webpack-plugin 4.0.0-beta.14
• 97f9fb9 fix: load script files before style files files in defer script loading mode
• e97ce17 Release html-webpack-plugin 4.0.0-beta.13
• e448b5d Release html-webpack-plugin 4.0.0-beta.12
• de315eb feat: Add defer script loading
• 7df269f feat: Provide a verbose error message if html minification failed
• 1d66e53 feat: merge templateParameters with default template parameters
• dfb98e7 Fix typo in template option docts
• 096a760 Fix broken links in examples
• a195c34 docs: Update template-option documentation
• 40b410e docs: Update example for template parameters
• bf017f3 chore: Release 4.0.0-beta.11
• 2549557 test: Don't use minification for speed measurement
• de22fc2 test: Adjust measurment for node 6 on travis
• 24bf1b5 fix: Update references to html-minifier
• f4eafdc chore: Release 4.0.0-beta.10
• a2ad30a refactor: Use getAssetPath instead of calling the hook directly
• 2595a79 chore: Release 4.0.0-beta.9
• c66766c feat: Add support for minifying inline ES6 inside html templates
• 655cbcd Fix README typo
• 6de319b update lodash dependency for prototype polution vulnerability
• 35a1541 Properly encode file names emitted as part of URLs.

See the full diff

Package name: webpack

The new version differs by 250 commits.

• 610f368 5.0.0
• 5ce65c1 update examples
• bbe1230 Merge pull request #11628 from webpack/bugfix/real-content-hash
• 75ecff2 5.0.0-rc.6
• bfc35d6 Merge pull request #11603 from MayaWolf/master
• 76e8cbd Merge pull request #11622 from webpack/dependabot/npm_and_yarn/types/node-13.13.25
• 9fd1be2 chore(deps-dev): bump @ types/node from 13.13.23 to 13.13.25
• 36bcfaa Merge pull request #11621 from webpack/bugfix/11619
• 9130d10 fix called variables with ProvidePlugin
• 3e42105 Merge pull request #11620 from webpack/bugfix/11617
• 4709719 skip connections copied to concatenated module
• 57b493f 5.0.0-rc.5
• 1658e2f Merge pull request #11618 from webpack/bugfix/11615
• a8fb45d fixes crash in SideEffectsFlagPlugin
• 84b196d emit error instead of crashing when unexpected problem occurs
• 5573fed Merge pull request #11601 from Hornwitser/improve-suggested-polyfill-config
• 9b5cce9 Merge pull request #11609 from snitin315/export-types
• 37c495c export type RuleSetUseItem
• 39faf34 export type RuleSetUse
• e5fd246 export type RuleSetConditionAbsolute
• 660baad export RuleSetCondition types
• 13e3ca5 Merge pull request #11602 from webpack/bugfix/shared-runtime-chunk
• 9c0587e Merge pull request #11606 from webpack/dependabot/npm_and_yarn/simple-git-2.21.0
• 502d166 Merge pull request #11607 from webpack/dependabot/npm_and_yarn/acorn-8.0.4

See the full diff

Package name: webpack-cli

The new version differs by 250 commits.

• fb50f76 chore(release): publish new version
• 2c75aeb chore: new version of the packages
• 0d05c30 chore(release): publish %s
• 3f9e151 chore: fix lerna config
• 2c1e34c tests(generator): enhance init generator tests (Async shared cache (probably not wanted) JedWatson/react-select#1236)
• 6ee61b9 Fix loader-generator and plugin-generator tests (If options are being returned by a call or async but all options are returned when the call returns. JedWatson/react-select#1250)
• 52956a2 Fixing the typos and grammatical errors in Readme files (Select multi, close dropdown when clicking selecting option - v1.0.0-rc.2  JedWatson/react-select#1246)
• 7faaed2 chore: update Bug_report & Feature_request Templates (Remove Creatable's new option on close JedWatson/react-select#1256)
• 7a5b33d feat(webpack-cli): added mode argument (Remove hidden input when multi select is empty JedWatson/react-select#1253)
• 3715756 tests(webpack-cli): add test case for defaults flag (explicitly call .blur() on select? JedWatson/react-select#1254)
• a7cba2f chore: project maintanance and typescript fix (Creatable component doesn't allow input key down handling. JedWatson/react-select#1247)
• 7748472 chore: ignore package-lock.json and remove its references (Clearing value in multi select causes option list to expand JedWatson/react-select#1252)
• a014aa7 docs: fix supported arguments & commands link in README (AsyncCreatable lower cases entries - v1.0.0-rc.2 JedWatson/react-select#1244)
• 06129a1 feat(webpack-cli): add progress bar for progress flag (onChange event fires in different order than "native" form/select JedWatson/react-select#1238)
• 6cc6a49 chore: post refactor CLI (feat(pagination): add async pagination JedWatson/react-select#1237)
• 358651e chore: move cli under lerna package (standalone.html fails JedWatson/react-select#1225)
• 2dc495a fix(init): fix webpack config scaffold (Call user-defined onInputChange props on Async and Creatable components JedWatson/react-select#1231)
• 1ab62d2 tests(generator): add tests for plugin generator (is there any way to expand the options list by default, without clicking the selection menu ?  JedWatson/react-select#1235)
• d2dd0c1 tests(sourcemap): fix flaky stats statement (Fixed #284. Added support for direction control. JedWatson/react-select#1232)
• f6dc680 tests(loader-generator): add tests for loader generator (Gravatars not working in documentation-page when using HTTPS JedWatson/react-select#1234)
• 35d1381 tests(generator): enable init generator test (Cursor blinks slightly below its normal position. JedWatson/react-select#1233)
• 66cdcb6 chore(generator): remove transpiled tests (How to set the default selected value while very first time loading JedWatson/react-select#1229)
• f29a170 fix(init): fix the invalid package name (isLoading is broken in rc2 JedWatson/react-select#1228)
• 8c3a66d chore(cli): updated changelog of v3 (Fixed #546. Added support for boolean values. JedWatson/react-select#1224)

See the full diff

Package name: webpack-dev-server

The new version differs by 250 commits.

• c9271b9 chore(release): 4.0.0
• 18bf369 test: fix stability (noOptionsMessage JedWatson/react-select#3676)
• cdcabb2 fix: respect protocol from browser for manual setup (NVDA has issues reading options JedWatson/react-select#3675)
• 1768d6b fix: initial reloading for lazy compilation (Update react-transition-group dependency to ^4.2.0 JedWatson/react-select#3662)
• 4f5bab1 docs: improve examples (Width is calculated wrong JedWatson/react-select#3672)
• f2d87fb fix: improve https CLI output (Get more options from API without the select loses focus and close menu JedWatson/react-select#3673)
• 0277c5e chore: remove redundant console statements (Is there a list of classNames available? JedWatson/react-select#3671)
• 16fcdbc docs: add `ipc` example (Need to add a class to options JedWatson/react-select#3667)
• 8915fb8 test: add e2e tests for built in routes (Expand and scroll container when opening menu JedWatson/react-select#3669)
• 4d1cbe1 docs: ask `version` information in issue template (Select all options JedWatson/react-select#3668)
• b6c1881 chore(deps-dev): bump core-js from 3.16.1 to 3.16.2 (add autoComplete as prop to the Select component JedWatson/react-select#3666)
• ffa8cc5 chore(deps-dev): bump supertest from 6.1.5 to 6.1.6 (Typescript build error  JedWatson/react-select#3665)
• f1fdaa7 chore(release): 4.0.0-rc.1
• c4678bc fix: legacy API (Cannot import react-select/creatable JedWatson/react-select#3660)
• d8bdd03 test: fix stability (Scroll on touchscreen not working when used in atlaskit/modal JedWatson/react-select#3661)
• 22b1414 refactor: remove `killable` (When click outside of the select, the select don't close JedWatson/react-select#3657)
• 75bafbf test: add e2e tests for module federation (first add value in creatable multi select text input and then remove. Again add, there is a error in conole JedWatson/react-select#3658)
• 493ccbd chore(deps): update `ws` (psuedo class first-child error JedWatson/react-select#3652)
• ae8c523 test: add e2e test for universal compiler (focused option starting at the selected option JedWatson/react-select#3656)
• f94b84f chore(deps): update (autoFocus prop and react-testing-library JedWatson/react-select#3655)
• 1923132 test: fix cli
• 2adfd01 test: fix todo (TypeError: __webpack_require__.i(…) is not a function in React-Select JedWatson/react-select#3653)
• 6e2cbde fix: proxy logging and allow to pass options without the `target` option (added noOptionsMessage to common props JedWatson/react-select#3651)
• c9ccc96 fix: respect infastructureLogging.level for client.logging (How I can use react-select with react-virtualized? JedWatson/react-select#3613)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Server-Side Request Forgery (SSRF)
🦉 Cross-site Request Forgery (CSRF)
🦉 More lessons are available in Snyk Learn