[Snyk] Upgrade jszip from 3.5.0 to 3.10.1

[octopus31]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade jszip from 3.5.0 to 3.10.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 9 versions ahead of your current version.
• The recommended version was released a year ago, on 2022-08-02.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-JSZIP-1251497	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept
	Arbitrary File Write via Archive Extraction (Zip Slip) SNYK-JS-JSZIP-3188562	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: jszip

• 3.10.1 - 2022-08-02
  

  3.10.1

• 3.10.0 - 2022-05-20
  

  3.10.0

• 3.9.1 - 2022-04-06
  

  3.9.1

• 3.9.0 - 2022-04-05
  

  3.9.0

• 3.8.0 - 2022-03-30
  

  3.8.0

• 3.7.1 - 2021-08-05
  

  3.7.1

• 3.7.0 - 2021-07-23
  

  3.7.0

• 3.6.0 - 2021-02-10
  

  3.6.0

• 3.6.0-0 - 2021-02-09
  

  3.6.0-0

• 3.5.0 - 2020-06-14
  

  3.5.0

from jszip GitHub release notes

Commit messages

Package name: jszip

• 0f2f1e4 3.10.1
• cae5510 Updates for v3.10.1
• 179c9a0 Update changelog for 3.10.1
• 61e1df5 Add Jekyll files to gitignore
• f299cce Merge pull request #852 from Stuk/metadata-ts
• 852887a Consolidate metadata types and expose OnUpdateCallback
• 5be00df Add sponsorship files
• dabe864 Update package-lock for benchmark
• cc554da Merge pull request #841 from stevennyman/patch-2
• caefbc0 Merge pull request #834 from Stuk/benchmark
• 53a4f14 Add trailing newlines
• 3b1f8b7 Add benchmark to PR workflow
• aa67068 Align on "benchmark" instead of "perf"
• da96cb5 Update actions/cache to v3
• 6f2474d Add perf/benchmark for browser
• 8d07f3c Refactor test runner for perf tests
• 204a60d Add node perf test
• 260e68a Merge pull request #839 from stevennyman/patch-1
• eaacc68 Merge pull request #842 from Stuk/eslint
• 5221202 Fix eslint errors
• 85c2348 Replace jshint with eslint
• 4e4c01a Update package-lock
• 60de12b Update current version on website
• 07b85ad Switch manual download link to HTTPS

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs