[Snyk] Fix for 5 vulnerabilities

[jwarkentin]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	Yes	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	Yes	Proof of Concept
	539/1000 Why? Has a fix available, CVSS 6.5	Improper Input Validation SNYK-JS-XMLDOM-1534562	No	No Known Exploit
	639/1000 Why? Has a fix available, CVSS 8.5	Prototype Pollution SNYK-JS-XMLDOM-3042242	No	No Known Exploit
	811/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 9.8	Improper Input Validation SNYK-JS-XMLDOM-3092935	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: googleapis

The new version differs by 163 commits.

• 8669d9a run npm install before npm publish (#944)
• d571e5d release 25.0.0 (#932)
• 2722f1f update package-lock.json (#942)
• 515fa50 chore: asyncify generator (#926)
• 0c306e5 chore: update source-map-support to 0.5.2 (#941)
• 9cdb096 chore: remove node 7 from CI (#940)
• eb86822 Update README.md (#928)
• 658c7cb Update mocha to the latest version 🚀 (#935)
• 8654a48 chore(package): update source-map-support to version 0.5.1 (#931)
• 640c621 chore(package): update opn to version 5.2.0 (#925)
• 573d96e Update js-green-licenses to the latest version 🚀 (#933)
• e734909 Circleci tests (#937)
• 474bed7 chore: Upgrade to the latest google-auth-library (#891)
• efd4af5 chore(package): update semistandard to version 12.0.0 (#910)
• 70a2ec0 fix: cleanup and fix samples (#916)
• dfcae5a chore(package): update js-green-licenses to version 0.3.1 (#919)
• 6a9b578 publishing 24.0.0 (#922)
• cdf72a2 reverting breaking change (#921)
• 8135ce0 updating googleapis (#920)
• 4c4cf53 Revert "updating googleapis"
• 2ffccde Revert "bump version, fix formatting"
• a408328 bump version, fix formatting
• c0a06ba updating googleapis
• 6ab07d9 chore(package): update nock to version 9.1.5 (#902)

See the full diff

Package name: soap

The new version differs by 181 commits.

• d74453d Release v0.40.0
• 65f4f15 Update Readme.md (#1150)
• 21b3373 Allow server path to be a regex (#1149)
• 5b7dfe2 replace request & httpntlm with axios & axios-ntlm (#1146)
• 22c234f Release v0.39.0
• a913515 Fixed namespace resolution in case of complexType extension. (#1145)
• 290e3c1 Read length of buffer directly (#1147)
• 95fa71f Release v0.38.0
• a1ad8ab Bump typedoc to 0.20.36, update package-lock.json (#1141)
• 25954fd Add an option to for an envelopeKey for WSSecurity (#1143)
• d684525 Circular element references inside wsdl - assistance needed (#1142)
• e61aa55 Remove duplicate paragraph and example code in Readme. (#1140)
• bf3b07d Release v0.37.0
• 272a7da Arrays with proper prefix and namespace (#1137)
• 0ef3c0e update xml-crypto version (#1138)
• 2b1e8bd Add native support for short deserialization (#1136)
• a6ae805 add handling for extension base without children (#1135)
• 1c76a87 Release v0.36.0
• 9c931e2 + pass *res* and *server* object into header() and method() (#1130)
• dd30130 refactor: use of Buffer.from instead of a deprecated new Buffer() (#1134)
• 9903060 Extract required HttpClient functions to dedicated interface (#1132)
• daea0b0 Release v0.35.0
• 2fef944 upgraded xml-crypto to latest version (#1131)
• 9be0b74 Release v0.34.0

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)
🦉 Prototype Pollution
🦉 Improper Input Validation