[Snyk] Fix for 5 vulnerabilities

[anantshri]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • DVAA/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASHTEMPLATE-1088054	Yes	Proof of Concept
	539/1000 Why? Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-NODEFETCH-2342118	Yes	No Known Exploit
	520/1000 Why? Has a fix available, CVSS 5.9	Denial of Service SNYK-JS-NODEFETCH-674311	Yes	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	No	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Prototype Pollution SNYK-JS-XML2JS-5414874	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: expo

The new version differs by 250 commits.

• 7bd5b06 Publish packages
• 652787f [babel-preset-expo] added object-rest-spread plugin to deps (#19829)
• 783d2af [templates] drop .expo-shared directories (#19823)
• fb6154a [expo] Revert #18913 (#19848)
• 9a0b315 [haptics] Backport #19819 to SDK 47
• f30c665 [ios][android][docs] "custom development build" -> "development build" (#19828)
• abef1f1 [ios][haptics] Feedback Generators in HapticModule now operate on the main thread (#19819)
• 18f828a [expo] Update react-dom bundled version [skip ci]
• ae341f3 [android] Bump Expo Go version [skip ci]
• 2f674b8 [android] Workaround for release build error (#17221)
• a2c81d9 [docs] Update using-hermes guide (#19795)
• daec5fc [expo] Fix crash on v8 (#19843)
• cb30a98 [expo] Send a warning for missing native modules (#19845)
• 4021cd3 [docs] Fix onDestroy typo in android modules (#19844)
• 3b96aab [gh] Replace deprecated ::set-output (#19839)
• 45b839d [bare-expo] Update detox (#19827)
• c53ca92 Add missing codeowners for package manager (#19767)
• ce810e9 [updates] yet another fix for missing app.manifest on android (#19809)
• 3086fa7 [create-expo-module] Fix example project bundling error (#19797)
• f3cc5a0 [templates] Update for latest beta
• 1a87dcc Publish packages
• c96ebba [expo] Fix missing disable-missing-native-module-errors.js on npm (#19815)
• e963041 fix(config-plugins): add missing null checks (#19754)
• 2bd6434 fix(cli): resolve `metadata.json` file path absolutely for `npx expo export` (#19802)

See the full diff

Package name: react-native

The new version differs by 250 commits.

• 7473ce1 [0.65.0] Bump version numbers
• 5f0b805 [0.65.0-rc.4] Bump version numbers
• 83d9b9b [LOCAL] yarn lock update
• e775957 Revert "fix: Move react-native-codegen to be a direct dependency of react-native (fix for 0.65-stable)"
• 5f7deb5 [LOCAL] reintroduce generated codegen files
• c0df3e0 [LOCAL] autogenerated files
• 54fbe0d - Bump CLI to ^6.0.0 (#31971)
• 5efad92 Codegen: Always prepare filesystem
• dfd324e Extend codegen script to take library name, output dir arguments
• 1b7f95b Reorganize codegen script for clarity
• 041365e fix: codegen - project paths with spaces (#31141)
• 98e1734 fix: Move react-native-codegen to be a direct dependency of react-native (fix for 0.65-stable)
• e8d725a [0.65.0-rc.3] Bump version numbers
• e40f582 fix(deps): bump metro to 0.66.2 + dedup (#31886)
• e53745e Bump Flipper + Bump hermes (#31872)
• 4476fbc Allow PlatformColor to work with RCTView border colors (#29728)
• 49253dc Fix support for blobs larger than 64 KB on Android (#31789)
• 626d25c Android: upgrading to OkHttp from 4.9.0 to 4.9.1 to fix java.lang.NullPointerException: bio == null crash (#31822)
• db7aa7b [0.65.0-rc.2] Bump version numbers
• 121a6a4 Fix Android build sequencing
• ba4424f Revert "Revert "bump buildToolsVersion to 30.0.2 (#31627)""
• be9a669 Revert "Revert "Gradle 6.9, Android Gradle Plugin 4.2.1 (#31593)""
• 0e08b25 [0.65.0-rc.1] Bump version numbers
• ca5b943 [LOCAL] lock files update for 065 branch

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service
🦉 Prototype Pollution