[Snyk] Fix for 1 vulnerabilities

[hemanth]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: css-loader

The new version differs by 207 commits.

• 634ab49 chore(release): 2.0.0
• 6ade2d0 refactor: remove unused file (#860)
• e7525c9 test: nested url (#859)
• 7259faa test: css hacks (#858)
• 5e6034c feat: allow to filter import at-rules (#857)
• 5e702e7 feat: allow filtering urls (#856)
• 9642aa5 test: css stuff (#855)
• 3338656 fix: reduce number of require for url (#854)
• 533abbe test: issue 636 (#853)
• 08c551c refactor: better warning on invalid url resolution (#852)
• b0aa159 test: issue #589 (#851)
• f599c70 fix: broken unucode characters (#850)
• 1e551f3 test: issue 286 (#849)
• 419d27b docs: improve readme (#848)
• d94a698 refactor: webpack-default (#847)
• b97d997 feat: schema options
• 453248f fix: support module resolution in composes (#845)
• 8a6ea10 refactor: postcss plugins (#844)
• fdcf687 fix: url resolving logic (#843)
• 889dc7f feat: allow to disable css modules and disable their by default (#842)
• ee2d253 test: importLoaders option (#841)
• 1dad1fb feat: reuse postcss ast from other loaders (i.e `postcss-loader`) (#840)
• fe94ebc test: icss reserved keywords (#839)
• 9eaba66 refactor: migrate on message api for postcss-icss-plugin (#838)

See the full diff

Package name: img-loader

The new version differs by 33 commits.

• 25c4e7a Merge pull request [Snyk] Security upgrade css-loader from 0.23.1 to 5.0.0 #30 from thetalecrafter/next
• 77c4d67 fix bad link to loader docs
• b9dda91 add migration info to readme
• ab4dc2c require imagemin on demand so default passthough can succeed without it
• f0a2639 move imagemin to peer, plugin loading to client, and test with webpack 4
• 412f0ce Merge pull request [Snyk] Fix for 1 vulnerabilities #27 from thetalecrafter/greenkeeper/standard-11.0.0
• d06c7c3 chore(package): update standard to version 11.0.0
• 807f84b 2.0.1
• a8ae95f chore(changelog): update changelog
• bc8964c chore(package): update dependencies and add lockfile
• 3af843f Merge pull request [Snyk] Fix for 1 vulnerabilities #25 from thetalecrafter/greenkeeper/mocha-5.0.0
• b02afff chore(package): update mocha to version 5.0.0
• 041a7b6 Merge pull request [Snyk] Security upgrade img-loader from 1.3.1 to 2.0.0 #24 from thetalecrafter/greenkeeper/imagemin-mozjpeg-7.0.0
• 64abce0 fix(package): update imagemin-mozjpeg to version 7.0.0
• 8176693 Merge pull request [Snyk] Security upgrade img-loader from 1.3.1 to 3.0.0 #22 from thetalecrafter/greenkeeper/mocha-4.0.0
• 8eec78e Merge pull request [Snyk] Fix for 1 vulnerabilities #23 from thetalecrafter/greenkeeper/imagemin-svgo-6.0.0
• 475901d fix(package): update imagemin-svgo to version 6.0.0
• 0ded784 chore(package): update mocha to version 4.0.0
• 7c12eb6 Merge pull request [Snyk] Security upgrade css-loader from 0.23.1 to 5.0.0 #16 from thetalecrafter/greenkeeper/standard-10.0.1
• c52bc44 chore(package): update standard to version 10.0.1
• 976f6fc use safe-buffer in tests
• fcf2293 rewrite for webpack 2
• b00d2d6 Merge pull request [Snyk] Security upgrade img-loader from 1.3.1 to 3.0.0 #13 from thetalecrafter/greenkeeper/standard-9.0.0
• 2248170 chore(package): update standard to version 9.0.0

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.