[Snyk] Fix for 1 vulnerabilities

[psastras]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: css-loader

The new version differs by 39 commits.

• d7317ca chore(release): css-loader v0.26.2
• 7732614 Merge pull request #428 from helloyou2012/master
• f8cdaca fix deprecation warning (loader-utils)
• 7c45e94 docs(readme): udpates for JSF maintainers
• 199897f Fix Maintainer section look (#409)
• 793390a Merge pull request #408 from d3viant0ne/d3viant0ne-TravisValidations
• 2fd0c78 ci(Travis): updates Travis validations
• e54549e Merge pull request #407 from christianvuerings/readme-minimize
• 4bd7130 README - fix default for minimize
• 9508990 Merge pull request #380 from michael-ciniawsky/readme
• 08e9d47 Add `files` to `package.json`. (#388)
• 5735e5d Implement feedback from other loader readme's
• 851a22b Bump source-map-list to 0.1.7 (#383)
• a38e254 Add license file
• 5b856b2 0.26.1
• 85a2156 docs(README): refactor for webpack v2
• 46ebca3 expose getLocalIdent (#357)
• 564f521 add issue templates
• 9df4467 Update README.md
• 9497d74 0.26.0
• 2cd0cf7 update deps
• 8cd1069 Make -loader suffix consistent in README.md (#375)
• 008e6fd Disable Autoprefixer in cssnano (#361)
• 22f6621 0.25.0

See the full diff

Package name: file-loader

The new version differs by 28 commits.

• 5d8f73e chore(release): 0.10.1
• a8358a0 fix(getOptions): deprecation warn in loaderUtils (Location object does not get passed to components server side. RickWong/react-isomorphic-starterkit#129)
• b01526a Merge pull request Update packages version and README file RickWong/react-isomorphic-starterkit#123 from simon04/master
• 32aada7 Remove license link
• 2d239df chore(release): 0.10.0
• ba2e876 ci(Travis): update to webpack standard build
• d82e8de docs(readme): update urls for contrib move
• eaeaa0e docs(readme): fix icon url
• 6fec719 chore(release): add standard version & documentation
• 3e5985a docs(readme): fix maintainers section look
• b5ea427 chore(readme): Update to webpack standard format
• 1462d4b chore(license): add js foundation LICENSE file
• 6833c70 feat(resources): specify custom public file name
• 0727efe chore(issues): add issue templates
• 9fdd47e Add -loader suffix to README to reflect new loader syntax webpack 2 requirement
• 162c8fa 0.9.0
• f21695e Merge pull request [Snyk] Security upgrade node-sass from 3.4.2 to 3.5.1 #41 from kossnocorp/patch-1
• 6dd8c0d Merge pull request [Snyk] Fix for 1 vulnerabilities #47 from tedpennings/patch-2
• 6a0317e added missing piece from [Snyk] Security upgrade node-sass from 3.4.2 to 7.0.0 #42
• 5ae3077 Merge branch 'public-path' Updated babel-core dev dependencies RickWong/react-isomorphic-starterkit#57
• dba9318 Merge pull request Noob routing issue RickWong/react-isomorphic-starterkit#58 from mrpoptart/patch-1
• 0241876 Merge pull request No clean URLs in 3.0.1 RickWong/react-isomorphic-starterkit#74 from elyobo/optional-emit
• 20c8fff Make emitting a file optional.
• 011fa30 Update README.md

See the full diff

Package name: isomorphic-style-loader

The new version differs by 32 commits.

• 8fe56ef 2.0.0
• 40a52bb Update dependencies
• 95c998f Add isomorphic-style-loader logo to README.md (Fix for missing browser history RickWong/react-isomorphic-starterkit#71)
• 3b082fd Add `files` section to package.json (How can I pass data from Component to html template RickWong/react-isomorphic-starterkit#86)
• f2fc85e Fixes for React 15.5.0 ((piping) Koa + webpack-hot-middleware loses WebSocket connection when server restarts RickWong/react-isomorphic-starterkit#90)
• 3722b99 1.1.0 ((Production) After running production build and then trying production start RickWong/react-isomorphic-starterkit#70)
• 627e65d Merge pull request (Hapi) Replace Hapi with something else RickWong/react-isomorphic-starterkit#69 from frenzzy/ie9-btoa
• d76df5e Do not use "btoa" it this feature does not exist
• bb0edbd Update dependencies, improve test coverage ((Webpack) Unable to load CSS files RickWong/react-isomorphic-starterkit#67)
• 1e70aff Update insertCss example to match react-starter-kit (No server errors shown in the console  RickWong/react-isomorphic-starterkit#61)
• fb0db41 Make sourceURL unique ([Snyk] Security upgrade isomorphic-style-loader from 0.0.10 to 2.0.0 #44)
• 3d3bc70 add access to content to dedup server generated styles ([Snyk] Security upgrade css-loader from 0.23.1 to 1.0.0 #56)
• f97ac75 use HMR if available, no debug option required (Updated babel-core dev dependencies RickWong/react-isomorphic-starterkit#57)
• f2a4d80 Modify withStyles HOC to hoist non-react statics ([Snyk] Fix for 1 vulnerabilities #38)
• 6ff8064 Updated code sample to reflect 1.0.0 change ([Snyk] Security upgrade css-loader from 0.23.1 to 1.0.0 #39)
• 83d1691 Add CHANGELOG.md file with version history
• aa8c10d Update npm modules; add test coverage
• 75257cf Merge pull request [Snyk] Security upgrade css-loader from 0.23.1 to 1.0.0 #33 from frenzzy/improve-hot-reload
• 640af4a Improve Hot Reload
• c7af229 Merge pull request [Snyk] Security upgrade node-sass from 3.4.2 to 7.0.0 #34 from johangirod/patch-1
• 4ad5330 Adding hot reload section in the README
• b033833 Add backers info to README.md
• 506718c Merge pull request [Snyk] Security upgrade node-sass from 3.4.2 to 3.7.0 #21 from inian/master
• 5e4b062 0.0.12

See the full diff

Package name: sass-loader

The new version differs by 115 commits.

• 0b401a6 6.0.2
• b362a00 Update CHANGELOG
• 770722b Merge pull request #383 from jtangelder/update/dependencies
• 47cead4 Update loader-utils
• a0d58e8 Update dependencies
• 42bfebb Merge pull request #381 from jtangelder/release/6.0.1
• 08c4acf 6.0.1
• 945ad1e Update CHANGELOG
• ad816d1 Merge pull request #377 from jtangelder/fix/source-map
• e0a9b39 Fix incorrect source maps in certain cwds
• f8cc068 Merge pull request #376 from jtangelder/fix/name-inconsistency
• e939cac Fix folder name inconsistency
• 5fe4030 Merge pull request #375 from jtangelder/release/6.0.0
• e29ab1d 6.0.0
• 9a4dbda Update CHANGELOG
• e5c25af Merge pull request #374 from jtangelder/refactor/source-map
• ce198d1 Improve source map support
• ca7c4a1 Merge pull request #370 from jtangelder/release/5.0.1
• fcb26a6 5.0.1
• 6cbc975 Update CHANGELOG
• bc3f23a Merge pull request #369 from jtangelder/fix/368-multi-compilation
• 8d54166 Fix bug where multiple compilations interfered with each other
• b387510 Merge pull request #367 from jtangelder/add/module-dot-name-test
• d250cf0 Add test cases for #360

See the full diff

Package name: style-loader

The new version differs by 30 commits.

• 11c54f2 chore(release): style-loader v0.13.2
• 13aa381 Merge pull request #174 from ryani33/fix-deprecated-warning
• da2bc5a fix deprecated warning
• 8ab1c5f Merge pull request #172 from joeshub/patch-1
• fc9ef25 Fixed link to local scope
• d99f992 Merge pull request #169 from simon04/master
• 79b2846 Remove license link
• cb3c0b6 Merge pull request #162 from d3viant0ne/d3viant0ne-UpdateDocsForFinal
• 700dd55 chore(readme): Update to webpack standard format
• 5a1a0f8 Merge pull request #160 from blainekasten/UpdateReadme
• e2e6956 Change Readme to use new Rule.use configuration
• 78de576 Add LICENSE file
• aed8706 Add issue templates
• 102c74b Merge pull request #151 from kennyjacob/patch-1
• 981814a Update README.md
• 6751466 Merge pull request #150 from kevinzwhuang/add-loader-suffix
• f683bd3 Add -loader suffix to reflect new loader syntax webpack 2 requirement
• 9dc45a6 Replace window with self for better web worker support
• 50af215 Merge pull request Fix not working isomoprhic style import on client RickWong/react-isomorphic-starterkit#120 from crucialfelix/patch-1
• 4f319d2 add a one-line description of what the style-loader actually does
• bba5bdb 0.13.1
• 7df14ac Merge pull request Add tree-shaking support? RickWong/react-isomorphic-starterkit#116 from zachlysobey/patch-1
• 556ff32 Fix typo in README
• cff991e Merge pull request [question] Clarification to the existance of webpack.server.js RickWong/react-isomorphic-starterkit#97 from jonathanp/readme-fixes

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)