[Snyk] Security upgrade ejs from 3.1.6 to 3.1.7

[aravindvnair99]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • functions/package.json
  • functions/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Remote Code Execution (RCE) SNYK-JS-EJS-2803307	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Remote Code Execution (RCE)

[guardrails]

⚠️ We detected 4 security issues in this pull request:

Vulnerable Libraries (4)

Severity	Details
Critical	pkg:npm/ejs@3.1.7@3.1.7 (t) - no patch available
Informational	pkg:npm/morgan@1.10.0@1.10.0 (t) upgrade to: 3.1.0
Critical	pkg:npm/firebase-functions@3.15.1@3.15.1 (t) upgrade to: 6.10.3, 6.9.7, 6.8.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, 4.17.3, 6.2.4, 3.1.0, 6.7.3
Critical	pkg:npm/firebase-admin@9.11.0@9.11.0 (t) upgrade to: 3.1.1, 6.11.3, 3.20.4, 2.0.6, 4.9.2, 4.1.1, 3.0.1, 9.0.0, 1.0.0, 6.0.1, 5.0.1, 2.6.7, 1.28.2, 1.3.0

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.