[Snyk] Upgrade react-scripts from 2.1.1 to 2.1.8

[MarwanShehata]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade react-scripts from 2.1.1 to 2.1.8.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 5 years ago, on 2019-03-07.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WEBSOCKETEXTENSIONS-570623	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-NODEFORGE-598677	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-MERGEDEEP-1070277	517/1000 Why? Proof of Concept exploit, CVSS 8.2	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Arbitrary Code Execution SNYK-JS-JSYAML-174129	517/1000 Why? Proof of Concept exploit, CVSS 8.2	No Known Exploit
	Prototype Pollution SNYK-JS-AJV-584908	517/1000 Why? Proof of Concept exploit, CVSS 8.2	No Known Exploit
	Improper Input Validation SNYK-JS-URLPARSE-2407770	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Improper Input Validation SNYK-JS-URLPARSE-543307	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Information Exposure SNYK-JS-WEBPACKDEVSERVER-72405	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-ASYNC-2441827	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Command Injection SNYK-JS-LODASH-1040724	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-450202	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-567746	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-608086	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Remote Memory Exposure SNYK-JS-DNSPACKET-1293563	517/1000 Why? Proof of Concept exploit, CVSS 8.2	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Information Exposure SNYK-JS-EVENTSOURCE-2823375	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Denial of Service (DoS) SNYK-JS-JSYAML-173999	517/1000 Why? Proof of Concept exploit, CVSS 8.2	No Known Exploit
	Denial of Service (DoS) SNYK-JS-HTTPPROXY-569139	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Improper Input Validation SNYK-JS-URLPARSE-1078283	517/1000 Why? Proof of Concept exploit, CVSS 8.2	No Known Exploit
	Open Redirect SNYK-JS-URLPARSE-1533425	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Access Restriction Bypass SNYK-JS-URLPARSE-2401205	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Authorization Bypass SNYK-JS-URLPARSE-2407759	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Authorization Bypass Through User-Controlled Key SNYK-JS-URLPARSE-2412697	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	517/1000 Why? Proof of Concept exploit, CVSS 8.2	No Known Exploit
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-scripts

• 2.1.8 - 2019-03-07
• 2.1.7 - 2019-03-07
• 2.1.6 - 2019-03-06
• 2.1.5 - 2019-02-11
• 2.1.4 - 2019-02-10
• 2.1.3 - 2019-01-04
• 2.1.3-next.6a95aae9 - 2019-01-04
• 2.1.2 - 2018-12-23
• 2.1.1 - 2018-11-01

from react-scripts GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs