[Snyk] Upgrade serve-static from 1.7.1 to 1.15.0

[RobertaBatista]

Snyk has created this PR to upgrade serve-static from 1.7.1 to 1.15.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 28 versions ahead of your current version.

• The recommended version was released on 2 years ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) npm:fresh:20170908	589	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:ms:20151024	589	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:ms:20151024	589	No Known Exploit
	Root Path Disclosure npm:send:20151103	589	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:mime:20170907	589	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:ms:20170412	589	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:ms:20170412	589	No Known Exploit
	Open Redirect npm:serve-static:20150113	589	No Known Exploit

Release notes

Package name: serve-static

• 1.15.0 - 2022-03-25
  
  • deps: send@0.18.0
    • Fix emitted 416 error missing headers property
    • Limit the headers removed for 304 response
    • deps: depd@2.0.0
    • deps: destroy@1.2.0
    • deps: http-errors@2.0.0
    • deps: on-finished@2.4.1
    • deps: statuses@2.0.1
• 1.14.2 - 2021-12-16
  
  • deps: send@0.17.2
    • deps: http-errors@1.8.1
    • deps: ms@2.1.3
    • pref: ignore empty http tokens
• 1.14.1 - 2019-05-11
  
  • Set stricter CSP header in redirect response
  • deps: send@0.17.1
    • deps: range-parser@~1.2.1
• 1.14.0 - 2019-05-08
  
  • deps: parseurl@~1.3.3
  • deps: send@0.17.0
    • deps: http-errors@~1.7.2
    • deps: mime@1.6.0
    • deps: ms@2.1.1
    • deps: statuses@~1.5.0
    • perf: remove redundant path.normalize call
• 1.13.2 - 2018-02-07
  
  • Fix incorrect end tag in redirects
  • deps: encodeurl@~1.0.2
    • Fix encoding % as last character
  • deps: send@0.16.2
    • deps: depd@~1.1.2
    • deps: encodeurl@~1.0.2
    • deps: statuses@~1.4.0
• 1.13.1 - 2017-09-29
  
  • Fix regression when root is incorrectly set to a file
  • deps: send@0.16.1
• 1.13.0 - 2017-09-28
  
  • deps: send@0.16.0
    • Add 70 new types for file extensions
    • Add immutable option
    • Fix missing </html> in default error & redirects
    • Set charset as "UTF-8" for .js and .json
    • Use instance methods on steam to check for listeners
    • deps: mime@1.4.1
    • perf: improve path validation speed
• 1.12.6 - 2017-09-23
  
  • deps: send@0.15.6
    • deps: debug@2.6.9
    • perf: improve If-Match token parsing
  • perf: improve slash collapsing
• 1.12.5 - 2017-09-21
  
  • deps: parseurl@~1.3.2
    • perf: reduce overhead for full URLs
    • perf: unroll the "fast-path" RegExp
  • deps: send@0.15.5
    • Fix handling of modified headers with invalid dates
    • deps: etag@~1.8.1
    • deps: fresh@0.5.2
• 1.12.4 - 2017-08-06
• 1.12.3 - 2017-05-17
• 1.12.2 - 2017-04-27
• 1.12.1 - 2017-03-05
• 1.12.0 - 2017-02-26
• 1.11.2 - 2017-01-23
• 1.11.1 - 2016-06-11
• 1.11.0 - 2016-06-08
• 1.10.3 - 2016-05-31
• 1.10.2 - 2016-01-20
• 1.10.1 - 2016-01-17
• 1.10.0 - 2015-06-18
• 1.9.3 - 2015-05-15
• 1.9.2 - 2015-03-15
• 1.9.1 - 2015-02-17
• 1.9.0 - 2015-02-17
• 1.8.1 - 2015-01-21
• 1.8.0 - 2015-01-06
• 1.7.2 - 2015-01-03
• 1.7.1 - 2014-10-23

from serve-static GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs