[Snyk] Security upgrade @hpcc-js/comms from 3.18.0 to 3.20.0

[GordonSmith]

Snyk has created this PR to fix 18 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• esp/src/package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue
	Uncaught Exception SNYK-JS-UNDICI-19635210
	HTTP Request Smuggling SNYK-JS-UNDICI-19635212
	Use of Persistent Cookies Containing Sensitive Information SNYK-JS-UNDICI-19635216
	Improper Certificate Validation SNYK-JS-UNDICI-19635218
	Origin Validation Error SNYK-JS-UNDICI-19635224
	XML Injection SNYK-JS-XMLDOMXMLDOM-19499070
	Regular Expression Denial of Service (ReDoS) SNYK-JS-XMLDOMXMLDOM-19498551
	XML Injection SNYK-JS-XMLDOMXMLDOM-19498561
	Allocation of Resources Without Limits or Throttling SNYK-JS-XMLDOMXMLDOM-19499069
	Inefficient Algorithmic Complexity SNYK-JS-XMLDOMXMLDOM-19499072
	XML Injection SNYK-JS-XMLDOMXMLDOM-19499073
	XML Injection SNYK-JS-XMLDOMXMLDOM-19499075
	Allocation of Resources Without Limits or Throttling SNYK-JS-XMLDOMXMLDOM-19499076
	XML Injection SNYK-JS-XMLDOMXMLDOM-19499081
	Improper Handling of Case Sensitivity SNYK-JS-XMLDOMXMLDOM-19499086
	XML Injection SNYK-JS-XMLDOMXMLDOM-19498556
	Improper Validation of Syntactic Correctness of Input SNYK-JS-XMLDOMXMLDOM-19498557
	Improper Encoding or Escaping of Output SNYK-JS-XMLDOMXMLDOM-19499074

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncaught Exception
🦉 Regular Expression Denial of Service (ReDoS)
🦉 XML Injection
🦉 More lessons are available in Snyk Learn

[GordonSmith]

This is a minor version upgrade from 3.18.0 to 3.20.0. A specific changelog or release notes for this version range could not be found within the hpcc-systems/Visualization mono-repository.

Without explicit release notes, there is a degree of uncertainty. While minor releases in well-maintained projects typically avoid breaking changes, it cannot be guaranteed without documentation.

Recommendation: Developers should test the functionality that relies on this package after the upgrade to ensure there are no unexpected behavioral changes. The risk is assessed as medium due to the lack of information.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.