[Snyk] Security upgrade rss-parser from 3.12.0 to 3.13.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	758/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-XML2JS-5414874	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: rss-parser

The new version differs by 26 commits.

• 74bdfd2 3.13.0
• 0413e12 Build distribution
• 2de2c40 Merge pull request Lines plugin: ignore repos lowlighter/metrics#247 from Arisamiga/master
• 3265b41 lockfileVersion 3 ->2 for backwards compatibility
• 986f163 Merge branch 'master' into master
• 861855f Merge pull request Activity overview graph lowlighter/metrics#248 from rbren/rb/update-actions
• 49b7a41 Update node.js.yml
• 8e962eb Fix for dependency collision
• 46667c1 Updated Dependencies
• 4c1a0dc Merge pull request Condense merge commits lowlighter/metrics#242 from d-line/master
• f76cc42 Merge pull request [Snyk] Upgrade @primer/css from 20.8.0 to 20.8.3 #2 from d-line/node-bump
• e51b7be fix: use 3 most recent LTS releases in worklow
• 54ac781 Merge pull request [ImgBot] Optimize images #1 from d-line/tests-fix
• 12f3cd2 fix: carefully handle when 'rdf:about' is not there. regenerate test mocks
• e2e2f4d Merge pull request Prepare release v3.6 lowlighter/metrics#203 from yuiseki/rdf-about
• b8cff02 Merge pull request Add markdown template lowlighter/metrics#209 from drublic/master
• 697af31 Merge pull request Resolve overflow-x bug on the footer (resolve #199) lowlighter/metrics#200 from KevinFerm/patch-1
• 18dd399 Add field in item: episodeType on itunes data
• ef4f4a2 fix typo
• 67c3dbb add `rdf:about` field to item on `parseItemRss`
• 2e0244a Update index.d.ts
• 33a9a42 Merge pull request Metrics website error while generating metrics. lowlighter/metrics#195 from Booligoosh/patch-1
• f50421d Merge pull request Feat plugin stock lowlighter/metrics#196 from drublic/master
• af6a5ad Fix breakting keywords and categories if there are attributes `text`

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

[socket-security]

New dependency changes detected. Learn more about Socket for GitHub ↗︎

---

🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] bar@* or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]

⚠️ Filesystem access

Accesses the file system, and could potentially read sensitive data.

If a package must read the file system, clarify what it will read and ensure it reads only what it claims to. If appropriate, packages can leave file system access to consumers and operate on data passed to it instead.

Package	Module	Location	Source
[email protected] (added)	fs	dist/bin.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	scripts/bundle.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	scripts/compile-dots.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	lib/argument_parser.js	package-lock.json via [email protected]
[email protected] (added)	fs	argparse.js	package-lock.json via [email protected], [email protected], [email protected], [email protected]
[email protected] (added)	fs	lib/index.js	package-lock.json via [email protected]
[email protected] (added)	fs	bindings.js	package-lock.json via [email protected]
[email protected] (added)	fs	bin/cmd.js	package-lock.json via [email protected]
[email protected] (added)	fs	example/async.js	package-lock.json via [email protected]
[email protected] (added)	fs	example/main.js	package-lock.json via [email protected]
[email protected] (added)	fs	index.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/ag.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/async.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/bundle.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/cmd.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/ag.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/async_encoding.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/async_str_encoding.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/async.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/buffer.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/dynamic_read_concat.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/dynamic_read_no_concat.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/encoding.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/hoist.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/inline.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/main.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/multi_var.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/non_fs.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/path_join_other_name.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/path_join_single_var.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/path_join.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/readdir-sync.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/readdir.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/separators.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/files/with_comments.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/hoist.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/inline.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/multi_var.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/non_fs.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/path_join_other_name.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/path_join_single_var.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/path_join.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/readdir.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/require_resolve.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/require_resolve/main.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/separators.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/tr.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/with_comments.js	package-lock.json via [email protected]
[email protected] (added)	fs	cli.js	package-lock.json via [email protected]
[email protected] (added)	fs	node.js	package-lock.json via [email protected]
[email protected] (added)	fs	index.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	util/has_lib.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	util/win_jpeg_lookup.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	lib/fs/node.js	package-lock.json via [email protected]
[email protected] (added)	fs	chownr.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	chownr.js	package-lock.json via [email protected], [email protected], [email protected]
[email protected] (added)	fs	index.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	lib/command.js	package-lock.json via [email protected]
[email protected] (added)	fs	dist/readFile.js	package-lock.json via [email protected]
[email protected] (added)	fs	lib/util/readShebang.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	lib/CSSStyleDeclaration.js	package-lock.json via [email protected]
[email protected] (added)	fs	scripts/generate_properties.js	package-lock.json via [email protected]
[email protected] (added)	fs	bin/dsv2dsv.js	package-lock.json via [email protected]
[email protected] (added)	fs	bin/dsv2json.js	package-lock.json via [email protected]
[email protected] (added)	fs	bin/json2dsv.js	package-lock.json via [email protected]
[email protected] (added)	fs	lib/dashdash.js	package-lock.json via [email protected]
[email protected] (added)	fs	src/node.js	package-lock.json via [email protected], [email protected], [email protected]
[email protected] (added)	fs	index.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	ejs-v3.1.8/bin/cli.js	package-lock.json, package.json
[email protected] (added)	fs	ejs-v3.1.8/ejs.js	package-lock.json, package.json
[email protected] (added)	fs	ejs-v3.1.8/ejs.min.js	package-lock.json, package.json
[email protected] (added)	fs	ejs-v3.1.8/jakefile.js	package-lock.json, package.json
[email protected] (added)	fs	ejs-v3.1.8/lib/ejs.js	package-lock.json, package.json
[email protected] (added)	fs	dist/index.js	package-lock.json via [email protected]
[email protected] (added)	fs	dist/index.mjs	package-lock.json via [email protected]
[email protected] (added)	fs	sync/index.js	package-lock.json via [email protected]
[email protected] (added)	fs	sync/index.mjs	package-lock.json via [email protected]
[email protected] (added)	fs	lib/cli-engine/cli-engine.js	package-lock.json, package.json
[email protected] (added)	fs	lib/cli-engine/file-enumerator.js	package-lock.json, package.json
[email protected] (added)	fs	lib/cli-engine/lint-result-cache.js	package-lock.json, package.json
[email protected] (added)	fs	lib/cli-engine/load-rules.js	package-lock.json, package.json
[email protected] (added)	fs	lib/cli.js	package-lock.json, package.json
[email protected] (added)	fs	lib/eslint/eslint-helpers.js	package-lock.json, package.json
[email protected] (added)	fs	lib/eslint/eslint.js	package-lock.json, package.json
[email protected] (added)	fs	lib/eslint/flat-eslint.js	package-lock.json, package.json
[email protected] (added)	fs	bin/esparse.js	package-lock.json via [email protected]
[email protected] (added)	fs	bin/esvalidate.js	package-lock.json via [email protected]
[email protected] (added)	fs	bin/esvalidate.js	package-lock.json via [email protected]
[email protected] (added)	fs	bin/esparse.js	package-lock.json via [email protected], [email protected], [email protected]
[email protected] (added)	fs	bin/esvalidate.js	package-lock.json via [email protected], [email protected], [email protected]
[email protected] (added)	fs	bin/esvalidate.js	package-lock.json via [email protected], [email protected], [email protected]
[email protected] (added)	fs	index.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	lib/view.js	package-lock.json, package.json via [email protected]
[email protected] (added)	fs	index.js	package-lock.json via [email protected]
[email protected] (added)	fs	index.js	package-lock.json via [email protected]
[email protected] (added)	fs	test/test.js	package-lock.json via [email protected]
[email protected] (added)	fs	cache.js	package-lock.json via [email protected]
[email protected] (added)	fs	FileList-v1.0.3/index.js	package-lock.json via [email protected]
[email protected] (added)	fs	src/cache.js	package-lock.json via [email protected]
[email protected] (added)	fs	src/del.js	package-lock.json via [email protected]
[email protected] (added)	fs	src/utils.js	package-lock.json via [email protected]
[email protected] (added)	fs	lib/form_data.js	package-lock.json via [email protected]
[email protected] (added)	fs	lib/form_data.js	package-lock.json via @googlemaps/[email protected], [email protected], [email protected]
[email protected] (added)	fs	index.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	index.js	package-lock.json via [email protected], [email protected], [email protected]
[email protected] (added)	fs	index.js	package-lock.json via [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added)	fs	old.js	package-lock.json via [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added)	fs	async.cjs	package-lock.json via [email protected]
[email protected] (added)	fs	sync.cjs	package-lock.json via [email protected]
[email protected] (added)	fs	lib/index.js	package-lock.json via [email protected]
[email protected] (added)	fs	examples/example.js	package-lock.json, package.json
[email protected] (added)	fs	examples/streaming.js	package-lock.json, package.json
[email protected] (added)	fs	test/index.js	package-lock.json, package.json
[email protected] (added)	fs	common.js	package-lock.json via [email protected]
[email protected] (added)	fs	lib/index.js	package-lock.json via [email protected]
[email protected] (added)	fs	index.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	mode.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	test/basic.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	windows.js	package-lock.json via [email protected], [email protected]
[email protected] (added)	fs	lib/context.js	package-lock.json via [email protected]
[email protected] (added)	fs	lib/map-store.js	package-lock.json via [email protected]
[email protected] (added)	fs	jake-v10.8.5/jakefile.js	package-lock.json via [email protected]
[email protected] (added)	fs	jake-v10.8.5/lib/jake.js	package-lock.json via [email protected]
[email protected] (added)	fs	jake-v10.8.5/lib/loader.js	package-lock.json via [email protected]
[email protected] (added)	fs	jake-v10.8.5/lib/package_task.js	package-lock.json via [email protected]
[email protected] (added)	fs	jake-v10.8.5/lib/program.js	package-lock.json via [email protected]
[email protected] (added)	fs	jake-v10.8.5/lib/program.js	package-lock.json via [email protected]
[email protected] (added)	fs	jake-v10.8.5/lib/publish_task.js	package-lock.json via [email protected]
[email protected] (added)	fs	jake-v10.8.5/lib/rule.js	package-lock.json via [email protected]
[email protected] (added)	fs	jake-v10.8.5/lib/task/directory_task.js	[package-lock.json](https://github.com/Jerk