From 8d2ff19e2772b592aed7317656aee61d8767decf Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 17 Dec 2024 06:59:06 +0000
Subject: [PATCH] fix: upgrade qs from 6.13.0 to 6.13.1

Snyk has created this PR to upgrade qs from 6.13.0 to 6.13.1.

See this package in npm:
qs

See this project in Snyk:
https://app.snyk.io/org/lakshay12290/project/a88c628b-270d-47f3-beb3-caa89cb20dbd?utm_source=github&utm_medium=referral&page=upgrade-pr
---
 package-lock.json | 43 +++++++++++++++++++++++++++++++++++++------
 package.json      |  2 +-
 2 files changed, 38 insertions(+), 7 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 64d1882..1b4539a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -13,13 +13,13 @@
         "config": "^3.3.12",
         "connect-flash": "^0.1.1",
         "cookie": "^1.0.1",
-        "cookie-parser": "^1.4.7",
+        "cookie-parser": "~1.4.7",
         "cors": "^2.8.5",
         "debug": "~2.6.9",
         "express": "^4.21.1",
         "express-rate-limit": "^7.4.1",
-        "http-errors": "^1.8.1",
         "express-session": "^1.18.1",
+        "http-errors": "~1.8.1",
         "joi": "^17.13.3",
         "jsonwebtoken": "^9.0.2",
         "mongoose": "^8.8.0",
@@ -29,7 +29,7 @@
         "passport-local": "^1.0.0",
         "passport-local-mongoose": "^8.0.0",
         "path-to-regexp": "^8.2.0",
-        "qs": "^6.5.3",
+        "qs": "^6.13.1",
         "send": "^1.1.0",
         "serve-static": "^1.16.2"
       }
@@ -297,6 +297,21 @@
         "node": ">= 0.8"
       }
     },
+    "node_modules/body-parser/node_modules/qs": {
+      "version": "6.13.0",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz",
+      "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "side-channel": "^1.0.6"
+      },
+      "engines": {
+        "node": ">=0.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/body-parser/node_modules/statuses": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz",
@@ -797,6 +812,21 @@
       "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.10.tgz",
       "integrity": "sha512-7lf7qcQidTku0Gu3YDPc8DJ1q7OOucfa/BSsIwjuh56VU7katFvuM8hULfkwB3Fns/rsVF7PwPKVw1sl5KQS9w=="
     },
+    "node_modules/express/node_modules/qs": {
+      "version": "6.13.0",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz",
+      "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "side-channel": "^1.0.6"
+      },
+      "engines": {
+        "node": ">=0.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/express/node_modules/safe-buffer": {
       "version": "5.2.1",
       "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
@@ -1928,9 +1958,10 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.13.0",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz",
-      "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==",
+      "version": "6.13.1",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.13.1.tgz",
+      "integrity": "sha512-EJPeIn0CYrGu+hli1xilKAPXODtJ12T0sP63Ijx2/khC2JtuaN3JyNIpvmnkmaEtha9ocbG4A4cMcr+TvqvwQg==",
+      "license": "BSD-3-Clause",
       "dependencies": {
         "side-channel": "^1.0.6"
       },
diff --git a/package.json b/package.json
index cc89c5b..774cde8 100644
--- a/package.json
+++ b/package.json
@@ -27,7 +27,7 @@
     "passport-local": "^1.0.0",
     "passport-local-mongoose": "^8.0.0",
     "path-to-regexp": "^8.2.0",
-    "qs": "^6.5.3",
+    "qs": "^6.13.1",
     "send": "^1.1.0",
     "serve-static": "^1.16.2"
   }