[Snyk] Fix for 7 vulnerabilities

[dotam99]

Snyk has created this PR to fix 7 vulnerabilities in the yarn dependencies of this project.

Snyk changed the following file(s):

• package.json
• yarn.lock

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-1579269	696
	Improper Handling of Extra Parameters SNYK-JS-FOLLOWREDIRECTS-6141137	686
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	646
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	586
	Prototype Pollution SNYK-JS-XML2JS-5414874	586
	Information Exposure SNYK-JS-NODEFETCH-2342118	539
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	344

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution

[guardrails]

⚠️ We detected 76 security issues in this pull request:

Mode: paranoid | Total findings: 76 | Considered vulnerability: 76

Vulnerable Libraries (76)

Severity	Details
Medium	pkg:npm/ajv@6.12.2 (t) upgrade to: 6.12.3
High	pkg:npm/ansi-regex@3.0.0 (t) upgrade to: 5.0.1,4.1.1,3.0.1,6.0.1
High	pkg:npm/ansi-regex@4.1.0 (t) upgrade to: 6.0.1,5.0.1,4.1.1,3.0.1
High	pkg:npm/ansi-regex@5.0.0 (t) upgrade to: 5.0.1,4.1.1,3.0.1,6.0.1
N/A	pkg:npm/axios@0.21.4 (t) upgrade to: 1.8.2
N/A	pkg:npm/base-x@3.0.8 (t) upgrade to: 5.0.1,4.0.1,3.0.11
High	pkg:npm/body-parser@1.19.0 (t) upgrade to: 1.20.3
High	pkg:npm/braces@2.3.2 (t) upgrade to: 3.0.3
High	pkg:npm/braces@3.0.2 (t) upgrade to: 3.0.3
High	pkg:npm/browserify-sign@4.1.0 (t) upgrade to: 4.2.2
Medium	pkg:npm/browserslist@4.14.0 (t) upgrade to: 4.16.5
High	pkg:npm/cacheable-request@6.1.0 (t) upgrade to: 10.2.7
N/A	pkg:npm/cookie@0.4.0 (t) upgrade to: 0.7.0
Medium	pkg:npm/cookiejar@2.1.2 (t) upgrade to: 2.1.4
High	pkg:npm/cross-spawn@7.0.3 (t) upgrade to: 7.0.5
High	pkg:npm/debug@2.6.9 (t) upgrade to: 3.1.0
Medium	pkg:npm/debug@3.2.6 (t) upgrade to: 4.3.1,2.6.9,3.1.0,3.2.7
Medium	pkg:npm/debug@4.1.1 (t) upgrade to: 4.3.1,2.6.9,3.1.0,3.2.7
High	pkg:npm/decode-uri-component@0.2.0 (t) - no patch available
N/A	pkg:npm/elliptic@6.3.3 (t) upgrade to: 6.6.1
N/A	pkg:npm/elliptic@6.5.2 (t) upgrade to: 6.6.1
Medium	pkg:npm/es5-ext@0.10.53 (t) upgrade to: 0.10.63
High	pkg:npm/express@4.17.1 (t) upgrade to: 6.4.1,6.9.7,6.8.3,6.6.1,6.5.3,6.2.4,4.17.3,6.10.3,6.7.3,6.3.3
Critical	pkg:npm/flat@4.1.0 (t) upgrade to: 5.0.1
High	pkg:npm/get-func-name@2.0.0 (t) upgrade to: 2.0.1
High	pkg:npm/glob-parent@3.1.0 (t) upgrade to: 6.0.1,5.1.2
High	pkg:npm/glob-parent@5.1.1 (t) upgrade to: 6.0.1,5.1.2
N/A	pkg:npm/got@9.6.0 (t) upgrade to: 12.1.0,11.8.5
N/A	pkg:npm/got@7.1.0 (t) upgrade to: 12.1.0,11.8.5
High	pkg:npm/http-cache-semantics@4.1.0 (t) upgrade to: 4.1.1
Critical	pkg:npm/json-schema@0.2.3 (t) upgrade to: 0.4.0
High	pkg:npm/json5@2.1.3 (t) upgrade to: 2.2.2
Medium	pkg:npm/lodash@4.17.20 (t) upgrade to: 4.17.21
N/A	pkg:npm/micromatch@3.1.10 (t) - no patch available
High	pkg:npm/minimatch@3.0.4 (t) upgrade to: 3.0.5
Critical	pkg:npm/minimist@1.2.5 (t) upgrade to: 1.2.6
High	pkg:npm/normalize-url@4.5.0 (t) upgrade to: 5.3.1,6.0.1,4.5.1
Medium	pkg:npm/path-parse@1.0.6 (t) upgrade to: 1.0.7
High	pkg:npm/path-to-regexp@0.1.7 (t) upgrade to: 0.1.10,8.0.0
High	pkg:npm/pathval@1.1.0 (t) upgrade to: 1.1.1
High	pkg:npm/qs@6.7.0 (t) upgrade to: 4.17.3,6.8.3,6.6.1,6.5.3,6.3.3,6.10.3,6.9.7,6.7.3,6.4.1,6.2.4
High	pkg:npm/qs@6.5.2 (t) upgrade to: 4.17.3,6.9.7,6.7.3,6.2.4,6.10.3,6.8.3,6.6.1,6.5.3,6.4.1,6.3.3
Medium	pkg:npm/request@2.88.2 (t) - no patch available
N/A	pkg:npm/secp256k1@3.8.0 (t) upgrade to: 5.0.1,4.0.4,3.8.1
N/A	pkg:npm/secp256k1@4.0.2 (t) upgrade to: 4.0.4,3.8.1,5.0.1
High	pkg:npm/semver-regex@2.0.0 (t) upgrade to: 3.1.4,4.0.3
Medium	pkg:npm/semver@7.0.0 (t) upgrade to: 7.5.2
Medium	pkg:npm/semver@5.7.1 (t) upgrade to: 7.5.2
Medium	pkg:npm/semver@6.3.0 (t) upgrade to: 7.5.2
Medium	pkg:npm/semver@7.3.2 (t) upgrade to: 7.5.2
Medium	pkg:npm/send@0.17.1 (t) upgrade to: 0.19.0
Medium	pkg:npm/serialize-javascript@4.0.0 (t) upgrade to: 6.0.2
Medium	pkg:npm/serve-static@1.14.1 (t) upgrade to: 1.16.0,2.1.0
High	pkg:npm/simple-get@2.8.1 (t) upgrade to: 4.0.1,3.1.1,2.8.2
Medium	pkg:npm/tar@4.4.13 (t) upgrade to: 6.2.1
Medium	pkg:npm/tough-cookie@2.5.0 (t) upgrade to: 4.1.3
Critical	pkg:npm/underscore@1.9.1 (t) upgrade to: 1.12.1
High	pkg:npm/web3-utils@1.3.0 (t) upgrade to: 4.2.1
Low	pkg:npm/web3@1.2.7 (t) - no patch available
High	pkg:npm/ws@3.3.3 (t) upgrade to: 5.2.4,6.2.3,7.5.10,8.17.1
High	pkg:npm/yaml@1.10.0 (t) upgrade to: 2.2.2
Critical	pkg:pypi/certifi@2020.6.20 upgrade to: 2023.7.22
N/A	pkg:pypi/eth-abi@2.1.1 upgrade to: 5.0.1
Medium	pkg:pypi/eth-account@0.5.4 upgrade to: 0.5.9
High	pkg:pypi/grpcio@1.32.0 upgrade to: 1.53.0,2.52.0,3.2.0
Medium	pkg:pypi/idna@2.10 upgrade to: 3.7
Medium	pkg:pypi/numpy@1.19.2 upgrade to: 1.21
N/A	pkg:pypi/pillow@8.1.1 (t) upgrade to: 9.0.0
Medium	pkg:pypi/protobuf@3.13.0 upgrade to: 3.15.0
Critical	pkg:pypi/pyarrow@1.0.1 upgrade to: 14.0.1
Medium	pkg:pypi/pycryptodome@3.9.8 upgrade to: 3.19.1
Medium	pkg:pypi/requests@2.24.0 upgrade to: 74ea7cf7a6a27a4eeb2ae24e162bcc942a6706d5,2.31.0
Medium	pkg:pypi/rsa@4.6 upgrade to: 4.7
Low	pkg:pypi/tqdm@4.51.0 upgrade to: 4.66.3
Medium	pkg:pypi/urllib3@1.25.11 upgrade to: 2.0.6,1.26.17
Medium	pkg:pypi/websockets@8.1 upgrade to: 9.1

More info on how to fix Vulnerable Libraries in JavaScript and Python.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.