[Snyk] Upgrade http-auth from 3.1.3 to 3.2.4

[lilmoonlil]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade http-auth from 3.1.3 to 3.2.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 4 years ago, on 2019-10-02.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Arbitrary File Overwrite SNYK-JS-TAR-1536528	410/1000 Why? CVSS 8.2	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536531	410/1000 Why? CVSS 8.2	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579147	410/1000 Why? CVSS 8.2	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579152	410/1000 Why? CVSS 8.2	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579155	410/1000 Why? CVSS 8.2	No Known Exploit
	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	410/1000 Why? CVSS 8.2	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	410/1000 Why? CVSS 8.2	Proof of Concept
	Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	410/1000 Why? CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-INI-1048974	410/1000 Why? CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-MIXINDEEP-450212	410/1000 Why? CVSS 8.2	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	410/1000 Why? CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-SETVALUE-1540541	410/1000 Why? CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-SETVALUE-450213	410/1000 Why? CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-SETVALUE-1540541	410/1000 Why? CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-SETVALUE-450213	410/1000 Why? CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-559764	410/1000 Why? CVSS 8.2	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	410/1000 Why? CVSS 8.2	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	410/1000 Why? CVSS 8.2	No Known Exploit
	Prototype Pollution SNYK-JS-MINIMIST-559764	410/1000 Why? CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-2429795	410/1000 Why? CVSS 8.2	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	410/1000 Why? CVSS 8.2	No Known Exploit
	Authentication Bypass SNYK-JS-HTTPAUTH-471683	410/1000 Why? CVSS 8.2	No Known Exploit
	Validation Bypass SNYK-JS-KINDOF-537849	410/1000 Why? CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-2429795	410/1000 Why? CVSS 8.2	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: http-auth

• 3.2.4 - 2019-10-02
• 3.2.3 - 2017-07-08
• 3.1.3 - 2017-03-07

from http-auth GitHub release notes

Commit messages

Package name: http-auth

• 8eb8fc6 Added lock file.
• 5ef7c9e Corrected formatting.
• b32a618 Merge pull request Open with Live Server with unsupported files (not html/svg) should open files instead of root folder ritwickdey/vscode-live-server#95 from dukei/master
• 78be73f Fixed replay vulnerability
• 0896bab Update package.json
• c7e078a Removing domain.
• d2e2cb0 Adding custom user option.
• ce44990 Merge pull request Server Side Includes? ritwickdey/vscode-live-server#81 from dwelch2344/master
• 6f988b9 Add support for custom user added to request
• aa56779 Removing year.
• 9c5ea7a Build for Node 6 and 7.
• ba1be4c 2017.

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs