[BUG]Latest playwright depends on jpeg-js-0.4.3.tgz which cause the Whitesource Security alert

[I569110]

Context:

current Playwright Version: 1.17.1
Node.js version: v16.15.0
Browser: chromium

The newest version 1.22.2 for platwright also depends on jpeg-js-0.4.3.tgz which will casue the security alert in whiteSource check.
And the main reason for this alert is because the jpeg-js need to be upgraded to jpeg-js-0.4.4.tgz

[pavelfeldman]

Could you share more on the vulnerability? Is that a live-lock on malformed jpeg parsing? It does not look like we are affected.

[vince-fugnitto]

Could you share more on the vulnerability?

@pavelfeldman some additional information:

• https://nvd.nist.gov/vuln/detail/CVE-2022-25851
• https://security.snyk.io/vuln/SNYK-JS-JPEGJS-2859218
• jpeg-js DoS (infinite loop) jpeg-js/jpeg-js#105
• Add limits on sampling factors jpeg-js/jpeg-js#106

[pavelfeldman]

Thanks! 36c9abf