[Snyk] Fix for 114 vulnerabilities #338

snyk-bot · 2023-04-28T19:40:19Z

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- deps/npm/node_modules/tweetnacl/package.json

Vulnerabilities that will be fixed

With an upgrade:

Issue	Breaking Change	Exploit Maturity
Prototype Pollution SNYK-JS-AJV-584908	Yes	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
Denial of Service (DoS) SNYK-JS-ECSTATIC-540354	Yes	Proof of Concept
Heap-based Buffer Overflow SNYK-JS-ELECTRON-1021884	Yes	Mature
Use After Free SNYK-JS-ELECTRON-1041745	Yes	Mature
Improper Validation SNYK-JS-ELECTRON-1047306	Yes	Mature
Heap-based Buffer Overflow SNYK-JS-ELECTRON-1048693	Yes	No Known Exploit
Improper Access Control SNYK-JS-ELECTRON-1049321	Yes	No Known Exploit
Improper Input Validation SNYK-JS-ELECTRON-1049323	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1049547	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1050424	Yes	No Known Exploit
Information Exposure SNYK-JS-ELECTRON-1050427	Yes	No Known Exploit
Insufficient Validation SNYK-JS-ELECTRON-1050882	Yes	Mature
Use After Free SNYK-JS-ELECTRON-1050999	Yes	No Known Exploit
Out-of-bounds Read SNYK-JS-ELECTRON-1051000	Yes	No Known Exploit
Improper Input Validation SNYK-JS-ELECTRON-1064555	Yes	Proof of Concept
Use After Free SNYK-JS-ELECTRON-1064558	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1064561	Yes	No Known Exploit
Information Exposure SNYK-JS-ELECTRON-1065981	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1070013	Yes	No Known Exploit
Insufficient Validation SNYK-JS-ELECTRON-1070014	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1070015	Yes	No Known Exploit
Heap Buffer Overflow SNYK-JS-ELECTRON-1085647	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1085705	Yes	Mature
Use After Free SNYK-JS-ELECTRON-1085994	Yes	No Known Exploit
Out-of-Bounds SNYK-JS-ELECTRON-1085996	Yes	No Known Exploit
Information Exposure SNYK-JS-ELECTRON-1085998	Yes	No Known Exploit
Out-of-Bounds SNYK-JS-ELECTRON-1086693	Yes	No Known Exploit
Access Restriction Bypass SNYK-JS-ELECTRON-1086694	Yes	No Known Exploit
Improper Input Validation SNYK-JS-ELECTRON-1086695	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1087442	Yes	No Known Exploit
Out-of-bounds Write SNYK-JS-ELECTRON-1088600	Yes	Mature
Insecure Defaults SNYK-JS-ELECTRON-1088602	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1252279	Yes	Mature
Use After Free SNYK-JS-ELECTRON-1252280	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1253279	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1253281	Yes	No Known Exploit
Out-of-bounds SNYK-JS-ELECTRON-1257943	Yes	Mature
Use After Free SNYK-JS-ELECTRON-1258207	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1259349	Yes	No Known Exploit
Integer Overflow or Wraparound SNYK-JS-ELECTRON-1260586	Yes	No Known Exploit
Out-of-bounds Read SNYK-JS-ELECTRON-1261111	Yes	No Known Exploit
Heap-based Buffer Overflow SNYK-JS-ELECTRON-1277203	Yes	No Known Exploit
Integer Overflow SNYK-JS-ELECTRON-1277205	Yes	No Known Exploit
Improper Input Validation SNYK-JS-ELECTRON-1277526	Yes	No Known Exploit
Out Of Bounds Read SNYK-JS-ELECTRON-1278596	Yes	No Known Exploit
Heap-based Buffer Overflow SNYK-JS-ELECTRON-1296553	Yes	No Known Exploit
Heap-based Buffer Overflow SNYK-JS-ELECTRON-1296555	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1296557	Yes	No Known Exploit
Type Confusion SNYK-JS-ELECTRON-1296559	Yes	Proof of Concept
Use After Free SNYK-JS-ELECTRON-1296561	Yes	No Known Exploit
Race Condition SNYK-JS-ELECTRON-1296563	Yes	No Known Exploit
Heap-based Buffer Overflow SNYK-JS-ELECTRON-1296565	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1312313	Yes	No Known Exploit
Access of Resource Using Incompatible Type ('Type Confusion') SNYK-JS-ELECTRON-1312314	Yes	Mature
Use After Free SNYK-JS-ELECTRON-1312315	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1313765	Yes	Mature
Use After Free SNYK-JS-ELECTRON-1313767	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1314896	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1315151	Yes	No Known Exploit
Out-of-bounds Write SNYK-JS-ELECTRON-1315668	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1533614	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1534881	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1534882	Yes	No Known Exploit
Type Confusion SNYK-JS-ELECTRON-1534883	Yes	Mature
Heap-based Buffer Overflow SNYK-JS-ELECTRON-1534884	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1536579	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1536581	Yes	Proof of Concept
Use After Free SNYK-JS-ELECTRON-1536587	Yes	No Known Exploit
Out-of-Bounds SNYK-JS-ELECTRON-1585619	Yes	Mature
Type Confusion SNYK-JS-ELECTRON-1586050	Yes	No Known Exploit
Buffer Overflow SNYK-JS-ELECTRON-1656742	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-1656743	Yes	Mature
Out-of-Bounds SNYK-JS-ELECTRON-1656745	Yes	No Known Exploit
Access Restriction Bypass SNYK-JS-ELECTRON-1656746	Yes	No Known Exploit
Improper Input Validation SNYK-JS-ELECTRON-1727344	Yes	Mature
Sandbox Bypass SNYK-JS-ELECTRON-1731315	Yes	Proof of Concept
Use After Free SNYK-JS-ELECTRON-174045	Yes	Mature
Use After Free SNYK-JS-ELECTRON-1910985	Yes	Mature
Use After Free SNYK-JS-ELECTRON-1910987	Yes	No Known Exploit
Exposure of Resource to Wrong Sphere SNYK-JS-ELECTRON-1910988	Yes	No Known Exploit
Improper Access Control SNYK-JS-ELECTRON-1910991	Yes	No Known Exploit
Type Confusion SNYK-JS-ELECTRON-1911949	Yes	Proof of Concept
Use After Free SNYK-JS-ELECTRON-1912074	Yes	No Known Exploit
Heap-based Buffer Overflow SNYK-JS-ELECTRON-1912084	Yes	No Known Exploit
Information Exposure SNYK-JS-ELECTRON-1912085	Yes	Mature
Arbitrary Code Execution SNYK-JS-ELECTRON-483050	Yes	No Known Exploit
Arbitrary Code Execution SNYK-JS-ELECTRON-483056	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-564272	Yes	No Known Exploit
Heap Overflow SNYK-JS-ELECTRON-565051	Yes	No Known Exploit
Out-of-bounds Read SNYK-JS-ELECTRON-565052	Yes	No Known Exploit
Improper Access Control SNYK-JS-ELECTRON-565362	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-565366	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-565368	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-565441	Yes	No Known Exploit
Buffer Underflow SNYK-JS-ELECTRON-565488	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-565490	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-565494	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-565571	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-565705	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-565709	Yes	No Known Exploit
Site Isolation Bypass SNYK-JS-ELECTRON-565713	Yes	No Known Exploit
Use After Free SNYK-JS-ELECTRON-570624	Yes	No Known Exploit
Type Confusion SNYK-JS-ELECTRON-570833	Yes	Proof of Concept
Arbitrary File Read SNYK-JS-ELECTRON-575393	Yes	No Known Exploit
Privilege Escalation SNYK-JS-ELECTRON-575394	Yes	No Known Exploit
Privilege Escalation SNYK-JS-ELECTRON-575395	Yes	No Known Exploit
Privilege Escalation SNYK-JS-ELECTRON-575396	Yes	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-2429795	Yes	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-559764	Yes	Proof of Concept
Prototype Pollution SNYK-JS-PLIST-2405644	Yes	Proof of Concept
Improper Privilege Management SNYK-JS-SHELLJS-2332187	Yes	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251	Yes	No Known Exploit
Regular Expression Denial of Service (ReDoS) npm:eslint:20180222	Yes	Proof of Concept