[Snyk] Security upgrade ejs from 3.1.6 to 3.1.10

[aravindvnair99]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • functions/package.json
  • functions/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Improper Control of Dynamically-Managed Code Resources SNYK-JS-EJS-6689533	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Control of Dynamically-Managed Code Resources

[guardrails]

⚠️ We detected 4 security issues in this pull request:

Insecure Processing of Data (1)

Severity	Details	Docs
Medium	Title: Tainted input passed to Express response Email-Application/functions/index.js Line 216 in e3064c7 res.send(req.decodedClaims.uid);	📚

More info on how to fix Insecure Processing of Data in JavaScript.

---

Vulnerable Libraries (3)

Severity	Details
High	pkg:npm/[email protected] upgrade to: 6.7.3,6.6.1,6.4.1,6.3.3,4.17.3,6.9.7,6.8.3,6.5.3,6.2.4,6.10.3
Critical	pkg:npm/[email protected] upgrade to: > 10.0.0
High	pkg:npm/[email protected] upgrade to: > 3.16.0

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.