[Snyk] Fix for 93 vulnerabilities by snyk-io[bot] · Pull Request #151 · dylansnyk/nodejs-goof

snyk-io · 2025-09-25T19:35:24Z

Snyk has created this PR to fix 93 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

package.json

⚠️

Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Prototype Pollution SNYK-JS-MQUERY-1050858	****
	Prototype Pollution SNYK-JS-MQUERY-1089718	****
	Improper Handling of Unexpected Data Type SNYK-JS-ONHEADERS-10773729	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	****
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-8482416	****
	Prototype Poisoning SNYK-JS-QS-3153490	****
	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	****
	Cross-site Scripting SNYK-JS-SEND-7926862	****
	Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	****
	Prototype Pollution SNYK-JS-SETVALUE-1540541	****
	Prototype Pollution SNYK-JS-SETVALUE-450213	****
	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	****
	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	****
	Prototype Pollution SNYK-JS-XML2JS-5414874	****
	Prototype Pollution SNYK-JS-YARGSPARSER-560381	****
	Arbitrary File Write via Archive Extraction (Zip Slip) npm:adm-zip:20180415	1000
	Remote Code Execution (RCE) SNYK-JS-EJS-2803307	621
	Cross-site Scripting (XSS) SNYK-JS-JQUERY-565129	496
	Improper Neutralization of Special Elements in Data Query Logic SNYK-JS-MONGOOSE-8623536	452
	Code Injection SNYK-JS-LODASH-1040724	399
	Prototype Pollution SNYK-JS-MONGOOSE-5777721	396
	Prototype Pollution SNYK-JS-DUSTJSLINKEDIN-1089257	346
	Improper Neutralization of Special Elements in Data Query Logic SNYK-JS-MONGOOSE-8446504	336
	Prototype Pollution SNYK-JS-MONGOOSE-2961688	321
	Prototype Pollution SNYK-JS-LODASH-567746	317
	Cross-site Scripting (XSS) SNYK-JS-JQUERY-567880	301
	Remote Memory Exposure npm:mongoose:20160116	297
	Uninitialized Memory Exposure npm:npmconf:20180512	286
	Prototype Pollution SNYK-JS-EXPRESSFILEUPLOAD-595969	274
	Prototype Pollution SNYK-JS-JQUERY-174006	268
	Prototype Pollution SNYK-JS-LODASH-6139239	267
	Regular Expression Denial of Service (ReDoS) npm:marked:20180225	264
	Open Redirect npm:st:20171013	260
	Prototype Pollution SNYK-JS-LODASH-450202	256
	Prototype Pollution SNYK-JS-LODASH-608086	250
	Predictable Value Range from Previous Values SNYK-JS-FORMDATA-10841150	249
	Prototype Pollution SNYK-JS-LODASH-73638	249
	Directory Traversal SNYK-JS-ADMZIP-1065796	244
	Arbitrary Code Execution npm:ejs:20161128	242
	Cross-site Scripting (XSS) npm:marked:20150520	238
	Prototype Pollution npm:lodash:20180130	233
	Prototype Pollution SNYK-JS-MONGOOSE-1086688	230
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	220
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962463	218
	DLL Injection SNYK-JS-KERBEROS-568900	212
	Code Injection npm:dustjs-linkedin:20160819	201
	Denial of Service (DoS) SNYK-JS-EXPRESSFILEUPLOAD-473997	192
	Cross-site Scripting (XSS) npm:marked:20170815	192
	Directory Traversal SNYK-JS-MOMENT-2440688	191
	Cross-site Scripting (XSS) npm:marked:20170112	190
	Regular Expression Denial of Service (ReDoS) npm:marked:20170907	190
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-584281	170
	Regular Expression Denial of Service (ReDoS) npm:moment:20161019	170
	Regular Expression Denial of Service (ReDoS) SNYK-JS-CROSSSPAWN-8303230	169
	Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	168
	Information Exposure SNYK-JS-MONGOOSE-472486	168
	Arbitrary Code Injection SNYK-JS-EJS-1049328	167
	Excessive Platform Resource Consumption within a Loop SNYK-JS-BRACES-6838727	159
	Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	159
	Directory Traversal npm:st:20140206	158
	Prototype Pollution SNYK-JS-INI-1048974	149
	Prototype Pollution SNYK-JS-MIXINDEEP-450212	149
	Cross-site Scripting (XSS) npm:jquery:20150627	139
	Prototype Pollution SNYK-JS-MPATH-1577289	137
	Denial of Service (DoS) npm:ejs:20161130-1	136
	Cross-site Scripting (XSS) npm:ejs:20161130	134
	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	131
	Cross-site Scripting (XSS) npm:marked:20170815-1	119
	Cross-site Scripting SNYK-JS-EXPRESS-7926867	115
	Denial of Service (DoS) SNYK-JS-MONGODB-473855	115
	Prototype Override Protection Bypass npm:qs:20170213	115
	Regular Expression Denial of Service (ReDoS) npm:fresh:20170908	114
	Regular Expression Denial of Service (ReDoS) npm:negotiator:20160616	114
	Open Redirect SNYK-JS-EXPRESS-6474509	110
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342073	105
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342082	105
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	104
	Improper Control of Dynamically-Managed Code Resources SNYK-JS-EJS-6689533	84
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-174116	76
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-451540	76
	Regular Expression Denial of Service (ReDoS) npm:ms:20151024	76
	Denial of Service (DoS) npm:mem:20180117	73
	Regular Expression Denial of Service (ReDoS) npm:moment:20170905	66
	Regular Expression Denial of Service (ReDoS) npm:ms:20170412	66
	Validation Bypass SNYK-JS-KINDOF-537849	58
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BRACEEXPANSION-9789073	57
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	57
	Regular Expression Denial of Service (ReDoS) npm:semver:20150403	46
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	45
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	45
	Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	44
	Regular Expression Denial of Service (ReDoS) npm:mime:20170907	40
	Reverse Tabnabbing SNYK-JS-ISTANBULREPORTS-2328088	35

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Directory Traversal
🦉 Regular Expression Denial of Service (ReDoS)
🦉 Cross-site Scripting (XSS)
🦉 More lessons are available in Snyk Learn

dylansnyk · 2025-09-25T19:35:37Z