[Snyk] Fix for 1 vulnerabilities

[evildevill]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • server/package.json
  • server/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	823/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.6	Server-side Request Forgery (SSRF) SNYK-JS-IP-6240864	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: cloudinary

The new version differs by 74 commits.

• 19b8cff Version 1.37.3
• eb6862d Merge pull request #618 from cloudinary/proxy-agent-removed
• d160902 fix: test fixes
• c124a98 chore: added compiled js
• 0ce2e47 fix: native http agent used instead of an external dependency
• 8aa469c Version 1.37.2
• d01409c Merge pull request #614 from cloudinary/vm2-override-version-bump
• 846e20b chore: bumped npm override for vm2 to latest
• bb0b44a Version 1.37.1
• 93cc3ed Merge pull request #610 from cloudinary/no-optional-require-http-agent
• 7d53e56 Merge branch 'master' into no-optional-require-http-agent
• b58cf73 Merge pull request #612 from cloudinary/dtslint-pipeline-fix
• 7e2514c fix: removing ts installed with dtslint to prevent fails on older node.js
• bee3de2 Merge branch 'master' into no-optional-require-http-agent
• 4d2fad9 Merge pull request #608 from cloudinary/snyk-upgrade-46d46b7c7da01b4244e35577ab8967e5
• bfcbaf0 fix: extracted optional require for proxy agent as a function
• 3ff1361 chore: removed unnecessary log
• d441300 chore: removed unnecessary log
• 44f4c5a fix: only explicit require used
• e2a2402 fix: upgrade core-js from 3.30.1 to 3.30.2
• ab69f5c Version 1.37.0
• 8b79a60 Merge pull request #606 from cloudinary/structured-metadata-rules-api
• fa2315a fix: fixes in types definitions and ts spec
• f351972 fix: adding es5 compiled code

See the full diff

Package name: mongoose

The new version differs by 250 commits.

• 5821568 chore: release 8.0.0
• 3f850ce docs: add version support notes for Mongoose 8, including EOL date for Mongoose 6
• db92dd9 Merge pull request #14004 from hasezoey/fixwebsite
• 68166bf chore(scripts/website): fix script to correctly parse "-rc" like versions
• c28cffe chore: release 8.0.0-rc0
• 4280457 Merge pull request #13937 from Automattic/8.0
• 502ec4b Merge pull request #13990 from Automattic/vkarpov15/gh-13897
• 572e018 chore: add 8.0.0-rc0 changelog
• b567ec6 feat: upgrade to MongoDB driver 6.2.0
• 9e9ad37 Merge branch 'master' into 8.0
• d3d2ec4 docs(migrating_to_8): add note about #13897 to migration guide
• 8d61a7d Merge branch '8.0' into vkarpov15/gh-13897
• f923f6c Merge pull request #13989 from Automattic/vkarpov15/gh-13578
• 30888e3 test: fix typescript tests
• ce66e23 fix lint
• 8fe5c36 docs: fix lint
• c7f110e docs(migrating_to_8): add note about `overwrite` to migration guide
• d6cd1db test: fix a couple of failing tests
• 84ac690 Merge branch '8.0' into vkarpov15/gh-13578
• c5b16fe test: add additional assert re: code review comment
• 7efa151 Merge pull request #13992 from suzuki/fix/doc-typescript-query-helper
• b630afb docs(migrating_to_8): add missing issues to migration guide
• eefe935 Merge branch 'master' into 8.0
• eacb5ab fix(document): fix missing import and change wrong variable name

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)