[Snyk] Security upgrade @koa/cors from 3.0.0 to 5.0.0

[panickervinod]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	716/1000 Why? Recently disclosed, Has a fix available, CVSS 8.6	Origin Validation Error SNYK-JS-KOACORS-6117545	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @koa/cors

The new version differs by 26 commits.

• c33bd69 Release 5.0.0
• f31dac9 Merge pull request from GHSA-qxrj-hx23-xp82
• 0f3f948 Release 4.0.0
• d19090f refactor: [BREAKING] drop node 8, 10, 12 support (#88)
• 7358ab3 fix: Calling all options even if origin header is not present (#87)
• b49b085 Release 3.4.3
• 208b86c Revert "fix: Calling all options even if origin header is not present (#87)"
• d5456f7 Release 3.4.2
• 2e8da5b fix: Calling all options even if origin header is not present (#87)
• ea0ca7b Release 3.4.1
• 1205356 fix: must specify an origin value instead of "*" wildcard (#85)
• 241a542 Release 3.4.0
• 2cd4789 🤖 TEST: Run test on Node.js 18 (#86)
• ae56e05 Create codeql-analysis.yml
• c4b5d21 refactor: use friendlier promise checking (#84)
• fbe33bc 📖 DOC: Add privateNetworkAccess js to README
• 6a45f38 Release 3.3.0
• c279fc3 feat: Add support for "Private Network Access" (#83)
• 97d9220 chore: credentials jsdoc (#80)
• 549776c Release 3.2.0
• bcadb55 test: run test on github action
• 134ec9b feat: support secure context headers
• f416c97 Release 3.1.0
• da84dec docs: update install script

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.