From 0664a69676718279eed4e7ed80ca9fdf97e8403b Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 18 Jan 2022 01:55:24 +0000
Subject: [PATCH] fix: package.json & package-lock.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NODEFETCH-2342118
---
 package-lock.json | 37 ++++++++++++++++++++++++++++++++++---
 package.json      |  2 +-
 2 files changed, 35 insertions(+), 4 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 15c73fe..d6abf68 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -178,6 +178,11 @@
                 }
             }
         },
+        "data-uri-to-buffer": {
+            "version": "4.0.0",
+            "resolved": "https://registry.npmjs.org/data-uri-to-buffer/-/data-uri-to-buffer-4.0.0.tgz",
+            "integrity": "sha512-Vr3mLBA8qWmcuschSLAOogKgQ/Jwxulv3RNE4FXnYWRGujzrRWQI4m12fQqRkwX06C0KanhLr4hK+GydchZsaA=="
+        },
         "ejs": {
             "version": "2.7.4",
             "resolved": "https://registry.npmjs.org/ejs/-/ejs-2.7.4.tgz",
@@ -556,6 +561,22 @@
             "resolved": "https://registry.npmjs.org/express-async-handler/-/express-async-handler-1.1.4.tgz",
             "integrity": "sha512-HdmbVF4V4w1q/iz++RV7bUxIeepTukWewiJGkoCKQMtvPF11MLTa7It9PRc/reysXXZSEyD4Pthchju+IUbMiQ=="
         },
+        "fetch-blob": {
+            "version": "3.1.3",
+            "resolved": "https://registry.npmjs.org/fetch-blob/-/fetch-blob-3.1.3.tgz",
+            "integrity": "sha512-ax1Y5I9w+9+JiM+wdHkhBoxew+zG4AJ2SvAD1v1szpddUIiPERVGBxrMcB2ZqW0Y3PP8bOWYv2zqQq1Jp2kqUQ==",
+            "requires": {
+                "web-streams-polyfill": "^3.0.3"
+            }
+        },
+        "formdata-polyfill": {
+            "version": "4.0.10",
+            "resolved": "https://registry.npmjs.org/formdata-polyfill/-/formdata-polyfill-4.0.10.tgz",
+            "integrity": "sha512-buewHzMvYL29jdeQTVILecSaZKnt/RJWjoZCF5OW60Z67/GmSLBkOFM7qh1PI3zFNtJbaZL5eQu1vLfazOwj4g==",
+            "requires": {
+                "fetch-blob": "^3.1.2"
+            }
+        },
         "geoip-lite": {
             "version": "1.3.7",
             "resolved": "https://registry.npmjs.org/geoip-lite/-/geoip-lite-1.3.7.tgz",
@@ -783,9 +804,14 @@
             }
         },
         "node-fetch": {
-            "version": "2.6.1",
-            "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.1.tgz",
-            "integrity": "sha512-V4aYg89jEoVRxRb2fJdAg8FHvI7cEyYdVAh94HH0UIK8oJxUfkjlDQN9RbMx+bEjP7+ggMiFRprSti032Oipxw=="
+            "version": "3.1.1",
+            "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-3.1.1.tgz",
+            "integrity": "sha512-SMk+vKgU77PYotRdWzqZGTZeuFKlsJ0hu4KPviQKkfY+N3vn2MIzr0rvpnYpR8MtB3IEuhlEcuOLbGvLRlA+yg==",
+            "requires": {
+                "data-uri-to-buffer": "^4.0.0",
+                "fetch-blob": "^3.1.3",
+                "formdata-polyfill": "^4.0.10"
+            }
         },
         "socket.io": {
             "version": "2.2.0",
@@ -1120,6 +1146,11 @@
                     "integrity": "sha1-AI4G2AlDIMNy28L47XagymyKxBk="
                 }
             }
+        },
+        "web-streams-polyfill": {
+            "version": "3.2.0",
+            "resolved": "https://registry.npmjs.org/web-streams-polyfill/-/web-streams-polyfill-3.2.0.tgz",
+            "integrity": "sha512-EqPmREeOzttaLRm5HS7io98goBgZ7IVz79aDvqjD0kYXLtFZTc0T/U6wHTPKyIjb+MdN7DFIIX6hgdBEpWmfPA=="
         }
     }
 }
diff --git a/package.json b/package.json
index fea0581..d59d301 100644
--- a/package.json
+++ b/package.json
@@ -17,7 +17,7 @@
         "express-async-handler": "^1.1.4",
         "geoip-lite": "^1.3.7",
         "lowdb": "^1.0.0",
-        "node-fetch": "^2.6.1",
+        "node-fetch": "^3.1.1",
         "socket.io": "^2.2.0"
     }
 }