[Snyk] Upgrade jszip from 3.2.2 to 3.8.0

[jswheeler]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade jszip from 3.2.2 to 3.8.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2022-03-30.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-JSZIP-1251497	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: jszip

• 3.8.0 - 2022-03-30
  

  3.8.0

• 3.7.1 - 2021-08-05
  

  3.7.1

• 3.7.0 - 2021-07-23
  

  3.7.0

• 3.6.0 - 2021-02-10
  

  3.6.0

• 3.6.0-0 - 2021-02-09
  

  3.6.0-0

• 3.5.0 - 2020-06-14
  

  3.5.0

• 3.4.0 - 2020-04-19
  

  3.4.0

• 3.3.0 - 2020-04-01
  

  3.3.0

• 3.2.2 - 2019-07-03
  

  3.2.2

from jszip GitHub release notes

Commit messages

Package name: jszip

• 3b98cfc 3.8.0
• 2edab36 Sanitize filenames with `loadAsync` to prevent zip slip attacks
• 1f631b0 Update contributing
• 459ff79 Add tests for utils that remove leading slash
• d4702a7 Merge pull request #541 from PatricSteffen/patch-1
• 2ebb7e8 Merge pull request #737 from satoshicano/update-types-JSZipLoadOptions
• 85c4989 Merge pull request #796 from Stuk/ghci
• 40cc7f4 Add dependency caching
• 5ee321e Install deps needed for Playwright on Github Actions
• eeb841e Remove code and dependencies used for Saucelabs
• e281bc3 Test using Playwright instead of Saucelabs
• f7275e6 Use local qunit files in tests
• 0509c73 Add playwright and http-server
• 2bb0f74 Add names to steps
• a076d64 Add Github Actions PR workflow
• 3f2f0da 3.7.1
• 9f9c33b Updates for 3.7.1
• 5639745 Merge branch 'fix-build'
• e08003e Fix lint
• 79f7691 Revert "Disable proto assert that fails in browsers"
• 89298b9 Update gitignore for Mac, and sort
• 81cb5eb Temporarily update docs for building dist correctly
• e5b3f0d 3.7.0
• e88ba4b Update for version 3.7.0

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs