[Snyk] Upgrade: body-parser, ejs

[yash509]

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

body-parser
from 1.18.3 to 1.20.2 | 6 versions ahead of your current version | 2 years ago
on 2023-02-22
ejs
from 2.6.1 to 2.7.4 | 5 versions ahead of your current version | 5 years ago
on 2019-11-19

Release notes

Package name: body-parser

• 1.20.2 - 2023-02-22
  
  • Fix strict json error message on Node.js 19+
  • deps: content-type@~1.0.5
    • perf: skip value escaping when unnecessary
  • deps: raw-body@2.5.2
• 1.20.1 - 2022-10-06
  
  • deps: qs@6.11.0
  • perf: remove unnecessary object clone
• 1.20.0 - 2022-04-03
  
  • Fix error message for json parse whitespace in strict
  • Fix internal error when inflated body exceeds limit
  • Prevent loss of async hooks context
  • Prevent hanging when request already read
  • deps: depd@2.0.0
    • Replace internal eval usage with Function constructor
    • Use instance methods on process to check for listeners
  • deps: http-errors@2.0.0
    • deps: depd@2.0.0
    • deps: statuses@2.0.1
  • deps: on-finished@2.4.1
  • deps: qs@6.10.3
  • deps: raw-body@2.5.1
    • deps: http-errors@2.0.0
• 1.19.2 - 2022-02-16
  
  • deps: bytes@3.1.2
  • deps: qs@6.9.7
    • Fix handling of __proto__ keys
  • deps: raw-body@2.4.3
    • deps: bytes@3.1.2
• 1.19.1 - 2021-12-10
  
  • deps: bytes@3.1.1
  • deps: http-errors@1.8.1
    • deps: inherits@2.0.4
    • deps: toidentifier@1.0.1
    • deps: setprototypeof@1.2.0
  • deps: qs@6.9.6
  • deps: raw-body@2.4.2
    • deps: bytes@3.1.1
    • deps: http-errors@1.8.1
  • deps: safe-buffer@5.2.1
  • deps: type-is@~1.6.18
• 1.19.0 - 2019-04-26
  
  • deps: bytes@3.1.0
    • Add petabyte (pb) support
  • deps: http-errors@1.7.2
    • Set constructor name when possible
    • deps: setprototypeof@1.1.1
    • deps: statuses@'>= 1.5.0 < 2'
  • deps: iconv-lite@0.4.24
    • Added encoding MIK
  • deps: qs@6.7.0
    • Fix parsing array brackets after index
  • deps: raw-body@2.4.0
    • deps: bytes@3.1.0
    • deps: http-errors@1.7.2
    • deps: iconv-lite@0.4.24
  • deps: type-is@~1.6.17
    • deps: mime-types@~2.1.24
    • perf: prevent internal throw on invalid type
• 1.18.3 - 2018-05-14
  
  • Fix stack trace for strict json parse error
  • deps: depd@~1.1.2
    • perf: remove argument reassignment
  • deps: http-errors@~1.6.3
    • deps: depd@~1.1.2
    • deps: setprototypeof@1.1.0
    • deps: statuses@'>= 1.3.1 < 2'
  • deps: iconv-lite@0.4.23
    • Fix loading encoding with year appended
    • Fix deprecation warnings on Node.js 10+
  • deps: qs@6.5.2
  • deps: raw-body@2.3.3
    • deps: http-errors@1.6.3
    • deps: iconv-lite@0.4.23
  • deps: type-is@~1.6.16
    • deps: mime-types@~2.1.18

from body-parser GitHub release notes

Package name: ejs

• 2.7.4 - 2019-11-19
  

  Bug fixes

  • Fixed Node 4 support, which broke in v2.7.3 (5e42d6c, @ mde)
• 2.7.3 - 2019-11-19
  

  Bug fixes

  • Made the post-install message more discreet by following the example of opencollective-postinstall (228d8e4, @ mde)
• 2.7.2 - 2019-11-13
  

  Features

  • Added support for destructuring locals (#452, @ ExE-Boss)
  • Added support for disabling legacy include directives (#458, #459, @ ExE-Boss)
  • Compiled functions are now shown in the debugger (#456, @ S2-)
  • function.name is now set to the file base name in environments that support this (#466, @ ExE-Boss)

  Bug Fixes

  • The error message when async != true now correctly mention the existence of the async option (#460, @ ExE-Boss)
  • Improved performance of HTML output generation (#470, @ nwoltman)
• 2.7.1 - 2019-09-02
  

  Deprecated:

  • Added deprecation notice for use of require.extensions (@ mde)
• 2.6.2 - 2019-06-15
  
  • Correctly pass custom escape function to includes (@ alecgibson)
  • Fixes for rmWhitespace (@ nwoltman)
  • Examples for client-side EJS compiled with Express middleware (@ mjgs)
  • Make Template constructor public (@ ThisNameWasTaken)
  • Added remove function to cache (@ S2-)
  • Recognize both 'Nix and Windows absolute paths (@ mde)
• 2.6.1 - 2018-05-05
  

  Version 2.6.1

from ejs GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs