[Snyk] Fix for 8 vulnerabilities

[bokssssss]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • bundle/server/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	589/1000 Why? Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-FILETYPE-2958042	Yes	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Denial of Service (DoS) npm:connect:20120107	Yes	No Known Exploit
	539/1000 Why? Has a fix available, CVSS 6.5	Cross-site Scripting (XSS) npm:connect:20130701	Yes	No Known Exploit
	484/1000 Why? Has a fix available, CVSS 5.4	Cross-site Scripting (XSS) npm:express:20140912	Yes	No Known Exploit
	399/1000 Why? Has a fix available, CVSS 3.7	Regular Expression Denial of Service (ReDoS) npm:mime:20170907	Yes	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Denial of Service (DoS) npm:qs:20140806	Yes	No Known Exploit
	539/1000 Why? Has a fix available, CVSS 6.5	Denial of Service (DoS) npm:qs:20140806-1	Yes	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Override Protection Bypass npm:qs:20170213	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: file-type

The new version differs by 38 commits.

• b5fe3b9 16.5.4
• d868356 Fix: Malformed MKV could cause an infinite loop
• 3b08ab1 Upgrade and unlock dependencies
• c011315 Lock strtok3 dependency
• 9102f1c Update dependency to token-types v3, supporting BigInt (#465)
• ac866f9 16.5.1
• 0012c56 Fix `mimeTypes` TypeScript type (#464)
• 92f3f50 Meta tweaks
• 4ea7bff 16.5.0
• 57ecf2d Add support for JPEG XL image format (#455)
• 07101ac Remove ASAR 240 bytes of JSON payload length limitation (#453)
• 3df0ed1 Remove an unnecessary dependency (#458)
• 1e4e8df 16.4.0
• 29618c8 Add support for VCF (and fix ICS detection) (#451)
• 6ab25f3 Add support for XCF (#450)
• 7021d9a Remove moot check for sync word at odd offsets for MPEG detection (#448)
• fd1e72c 16.3.0
• 9319167 Add support for Zstandard compressed file (#439)
• 2cc0869 Add file type descriptions (#433)
• 98e6886 16.2.0
• 9736aa3 Improve PDF / AI (Adobe Illustrator) recognition (#396)
• 7f95cd2 Add support for 3mf (#415)
• 579f8cb 16.1.0
• e43cdc9 Add support for CHM (#424)

See the full diff

Package name: imagemin

The new version differs by 14 commits.

• 6832717 8.0.1
• 6c5e6a8 Minor tweaks
• a88735f Fix handling of SVG (#390)
• 7993551 Fix Windows compatibility (#358)
• 1055059 Meta tweaks
• e2267f1 Meta tweaks
• 4a6d895 8.0.0
• d363bde Require Node.js 12 and move to ESM
• 11dfcb7 Meta tweaks
• 9cb2566 Fix the status badge
• fede5b3 Use GitHub Actions (#378)
• 830b214 Mention GitHub Sponsors
• 4c1e756 Require Node.js 10 (#359)
• 6c7b95f Readme tweaks

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)
🦉 Denial of Service (DoS)
🦉 Regular Expression Denial of Service (ReDoS)
🦉 More lessons are available in Snyk Learn