[Snyk] Security upgrade express from 4.17.1 to 4.20.0

[abood640]

Snyk has created this PR to fix 4 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	696
	Cross-site Scripting SNYK-JS-EXPRESS-7926867	541
	Cross-site Scripting SNYK-JS-SEND-7926862	391
	Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	391

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/accepts@1.3.8	None	0	16.8 kB	dougwilson
npm/body-parser@1.20.3	network	0	62.6 kB	ulisesgascon
npm/call-bind@1.0.7	None	0	22.1 kB	ljharb
npm/content-disposition@0.5.4	None	0	19.1 kB	dougwilson
npm/content-type@1.0.5	None	0	10.5 kB	dougwilson
npm/define-data-property@1.1.4	None	0	30.9 kB	ljharb
npm/es-define-property@1.0.0	None	0	11.8 kB	ljharb
npm/es-errors@1.3.0	None	0	12.3 kB	ljharb
npm/express@4.20.0	None	0	220 kB	blakeembrey, dougwilson, linusu, ...4 more
npm/finalhandler@1.2.0	environment	0	18.6 kB	dougwilson
npm/forwarded@0.2.0	None	0	5.88 kB	dougwilson
npm/function-bind@1.1.2	None	0	31.4 kB	ljharb
npm/get-intrinsic@1.2.4	eval	0	41.6 kB	ljharb
npm/gopd@1.0.1	None	0	7.7 kB	ljharb
npm/has-property-descriptors@1.0.2	None	0	10.9 kB	ljharb
npm/has-proto@1.0.3	None	0	12 kB	ljharb
npm/has-symbols@1.0.3	None	0	20.6 kB	ljharb
npm/hasown@2.0.2	None	0	8.77 kB	ljharb
npm/http-errors@2.0.0	None	0	18.8 kB	dougwilson
npm/ipaddr.js@1.9.1	None	0	42.1 kB	whitequark
npm/merge-descriptors@1.0.3	None	0	5.08 kB	sindresorhus
npm/mime-db@1.52.0	None	0	206 kB	dougwilson
npm/mime-types@2.1.35	None	0	18.3 kB	dougwilson

🚮 Removed packages:npm/accepts@1.3.5, npm/body-parser@1.19.0, npm/call-bind@1.0.0, npm/content-disposition@0.5.3, npm/content-type@1.0.4, npm/express@4.17.1, npm/finalhandler@1.1.2, npm/forwarded@0.1.2, npm/function-bind@1.1.1, npm/get-intrinsic@1.0.1, npm/has-symbols@1.0.1, npm/http-errors@1.7.2, npm/ipaddr.js@1.9.0, npm/merge-descriptors@1.0.1, npm/mime-db@1.38.0, npm/mime-types@2.1.22, npm/mock-express-request@0.2.2, npm/mock-express-response@0.2.2, npm/mock-req@0.2.0, npm/mock-res@0.5.0, npm/mockdate@3.0.2, npm/morgan@1.9.1, npm/move-concurrently@1.0.1

View full report↗︎