[Snyk] Security upgrade ejs-mate from 2.3.0 to 4.0.0

[fengmk2]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	526/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 4.1	Arbitrary Code Injection SNYK-JS-EJS-1049328	Yes	Proof of Concept
	798/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.1	Remote Code Execution (RCE) SNYK-JS-EJS-2803307	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: ejs-mate

The new version differs by 22 commits.

• 0d20da0 Bump 4.0.0
• f91ef40 fix the example
• 4ef15cb update npm version badge
• f55aa31 improve readme
• 4e0f690 cleanup useless dependencies
• c8ba443 upgrade supertest
• d3f3b5f migrate ejs to v3
• bdf22df Bump ejs to 3.1.7 (#35)
• d79964f remove node.js 6, 8 10 support
• 76f5af5 use codecov
• 881f8dd improve the coding styles
• a7b5622 refine dependencies & test cases
• ef86e2f remove travis ci
• 9f7cd00 Create node.js.yml
• 880bffd Bump 3.0.0
• 6380939 Merge pull request #32 from JacksonTian/ejs2
• 3931099 update travis config
• 04e1e53 make test pass
• 54f24ea Upgrade ejs to ^2.6.1
• 52955bb fix body
• eb09478 refine test cases
• 5fa388d use eslint instead of

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Arbitrary Code Injection 🦉 Remote Code Execution (RCE)