[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • auth-sessions/package.json
  • auth-sessions/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	673/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-FIREBASEUTIL-1038324	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: firebaseui

The new version differs by 19 commits.

• 1fb8703 [firebase-release] Updated FirebaseUI for Web to 3.1.0
• 489b3da Revert "[firebase-release] Updated FirebaseUI for Web to 3.1.0" (#434)
• dbc1017 [firebase-release] Updated FirebaseUI for Web to 3.1.0
• d7cfc72 Added changelog and updated readme for v3.1 (#432)
• a8a3868 3.1release (#430)
• a905ebd Fixes failing CI tests (#428)
• 0e445f3 Fixes the firebase.js CDN version in the demo app. (#403)
• 440c1b3 Using default attribute of Firebase require statement if available (#398)
• 0e512fd Makes firebase a peerDependency instead of a dependency. (#388)
• 8d24336 Removed deprecated JWT addon for travis. Instead configured the sauce (#386)
• 2a37b78 [firebase-release] Removed change log and reset repo after 3.0.0 release
• b8190fc [firebase-release] Updated FirebaseUI for Web to 3.0.0
• cac4047 Release v3.0 (#384)
• dc57287 updated saucelab browser version (#355)
• 641ffbe [firebase-release] Removed change log and reset repo after 2.7.0 release
• 40549d8 [firebase-release] Updated FirebaseUI for Web to 2.7.0
• e2c1fee Release (#354)
• 49de7f6 - Expose firebase.auth.UserCredential Auth result via new signInWithAuthResult callback. (#352)
• c7d3031 [firebase-release] Removed change log and reset repo after 2.6.3 release

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic