[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	673/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-HANDLEBARS-1279029	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: express-handlebars

The new version differs by 12 commits.

• a707698 Bump package version to 3.0
• 424e870 Version bump to object.assign and handlebars
• 07f9bbd Revert "use sindresorhus's object-assign polyfill"
• 5514a07 Fixed links
• d005c83 v2.0.2
• 14fa097 use handlebars 4.0.5 in shared template example
• 41e99a1 updated glob and graceful-fs dependencies
• 28335bc use sindresorhus's object-assign polyfill
• 4c16ce4 Merge branch 'PaulBGD-patch-1'
• c19c888 Update to the latest version of promise
• 5769107 Merge branch 'blendlabs-master'
• 71bac24 bump handlebars version to ^4.0.0

See the full diff

Package name: handlebars

The new version differs by 250 commits.

• a9a8e40 v4.7.7
• e66aed5 Update release notes
• 7d4d170 disable IE in Saucelabs tests
• eb860c0 fix weird error in integration tests
• b6d3de7 fix: check prototype property access in strict-mode (#1736)
• f058970 fix: escape property names in compat mode (#1736)
• 77825f8 refator: In spec tests, use expectTemplate over equals and shouldThrow (#1683)
• 3789a30 chore: start testing on Node.js 12 and 13
• e6ad93e v4.7.6
• 2bf4fc6 Update release notes
• b64202b Update release-notes.md
• c2f1e62 Switch cmd parser to latest minimist
• 08e9a11 Revert "chore: set Node.js compatibility to v6+"
• 1fd2ede v4.7.5
• 3c9c2f5 Update release notes
• 16487a0 chore: downgrade yargs to v14
• 309d2b4 chore: set Node.js compatibility to v6+
• 645ac73 test: fix integration tests
• b454b02 docs: update release-docs in CONTRIBUTING.md
• 7adc19a v4.7.4
• 9dd8d10 Update release notes
• 4671c4b Use tmp directory for files written during tests
• e46baa1 tasks/test-bin.js: Delete duplicate test
• c491b4e Revert "Update release-notes.md"

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

[coveralls]

Coverage remained the same at 79.618% when pulling 8ccfbd71a85fae69b3e915bc13d1139bde1d9c55 on snyk-fix-722e57744110f92aab98745dae402313 into c5f2c662682e4a19e9697cdb9f22bf4190441ef7 on master.