[Snyk] Fix for 8 vulnerabilities

[carlos-snyk]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	No	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	No	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-450202	No	Proof of Concept
	731/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.2	Prototype Pollution SNYK-JS-LODASH-567746	No	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	No	Proof of Concept
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution npm:lodash:20180130	No	Proof of Concept
	424/1000 Why? Has a fix available, CVSS 4.2	Insecure Randomness npm:node-uuid:20160328	No	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Override Protection Bypass npm:qs:20170213	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: qs

The new version differs by 225 commits.

• 10233c9 v6.0.4
• 2e1c659 [Tests] up to `node` `v7.7`, `v6.10`,` v4.8`; disable osx builds since they block linux builds.
• c709f6e [Fix] support keys starting with brackets.
• 65270af [Fix] chmod a-x
• 4d8ed03 [Fix] follow `allowPrototypes` option during merge
• be1c421 v6.0.3
• 938f24e [Fix] Restore `dist` directory; will be removed in v7.
• ca844c5 [Fix] ensure that `allowPrototypes: false` does not ever shadow Object.prototype properties.
• 47dfbd6 v6.0.2
• d89b173 [Docs] Add `evalmd`, fix broken examples in README, and ensure all examples have assertions.
• 807c310 [Tests] add `npm run lint`
• 3efbba4 [Refactor] Don’t reassign function parameters.
• bc0c1cb [Refactor] clean up whitespace.
• d6412f7 [Refactor] Use `module.exports` instead of `exports`.
• 5cc3728 [Fix] use `String(foo)` instead of `foo + ‘’` to correctly cast to a string.
• 4503717 [Refactor] remove unnecessary internal object lookup.
• f1a50c0 Add `npm run dist` to `prepublish`.
• ece0655 Remove compiled files from the git repo.
• 4c78294 Revert "Delete CHANGELOG.md" and update URLs.
• 7872213 [Tests] use my standard `travis.yml` file.
• ce56459 [Tests] convert tests to `tape` so they no longer require ES6 features.
• 224c8af [Refactor] use `var` instead of `const` and `let`.
• e4cf648 [Docs] add myself to package.json as a contributor
• bfe4582 [Dev Deps] update `browserify`, `code`, `lab`

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution
🦉 Prototype Pollution
🦉 More lessons are available in Snyk Learn