[Snyk] Fix for 1 vulnerabilities

[knanjukutty-polymath]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	170/1000 Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.01055, Social Trends: No, Days since published: 0, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 98, Impact: 5.99, Likelihood: 2.83, Score Version: V5	Prototype Pollution SNYK-JS-WEB3UTILS-6229337	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: solidity-coverage

The new version differs by 206 commits.

• c828d8b 0.7.12
• e6e627b Update main README with HH instructions (GTM logic refactored #572)
• b6c4839 Allow truffle projects to contain vyper contracts (Cleanup for timestamp #571)
• c88eed2 Locate .coverage_contracts correctly for subfolder paths (Update truffle to the latest version 🚀 #570)
• f5ed5e5 Merge pull request Migrating data to datastore #548 from sc-forks/hardhat
• e106076 Clean up & fixes for Hardhat PR (Update truffle-contract to the latest version 🚀 #569)
• 1dd9501 Replace Web3 with thin rpc wrapper (Allows explicit token factory version in generateSecurityToken() #568)
• 7bfaef4 Replace Web3 with thin rpc wrapper
• 2cf6530 Add hardhat readme (Add version to getSecurityTokenData (referenced directly from token using getVersion) #567)
• a68fefd Attach to Hardhat VM for trace (Refactor takeSnapShot #566)
• bab2a93 Remove death for hh & raise gas to maximum (Rename Mint and Burn events to match OpenZeppelin #565)
• 0d74ff0 Add shared buidler / hardhat plugin entrypoint (Merge 2.1 / 2.2 functionality #564)
• 587a1f3 Add complex compilation test case (Permission cleanup  #563)
• fefeff6 Set network "from" / fix HH trace logic (WIP - Merge Dev 2.2.0 into Dec 3.0.0 #562)
• dba6e0c Port Buidler tests to Hardhat (dev-2.2.0 to dev-3.0.0 merge #561)
• 1e9ef8b Split hardhat & builder / support HardhatEVM (Remove the investor array and add isVolRestricted flag for investors #560)
• 85f8384 Update buidler plugin for Hardhat compilation pipeline (version bump #540)
• 6761556 Use real Zeppelin (instead of fork) as E2E (Dependency cleanup #557)
• be11494 Stop reporting assert statements as branches (An in-range update of request-promise is breaking the build 🚨 #556)
• 19f1990 Remove ganache-core-sc dev dependency (Calculate size script optimized #554)
• f1d4001 Use commit url for @ openzeppelin/test-environment example (Update truffle to the latest version 🚀 #551)
• 52889ff Upgrade @ truffle/provider to 0.2.24 (Update solc to the latest version 🚀 #550)
• d6ec5cb Upgrade solidity-parser/parser to 0.8.1 (remove timestamps from the events #549)
• 9a2c7cb Mention reducing instrumentation footprint in "Running out of memory" section

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution