diff options
| author | snyk-bot | 2020-07-10 05:35:53 +0000 |
|---|---|---|
| committer | snyk-bot | 2020-07-10 05:35:53 +0000 |
| commit | 09d210e70b731c6e87c5963015150a4d7a75c000 (patch) | |
| tree | 2705b86c24178a778a3ee75182352c3bf60d6174 | |
| parent | aadb35975eb7d1c3cc2d5c69144fc8148fdf3502 (diff) | |
fix: package.json & yarn.lock to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
Diffstat (limited to '')
| -rw-r--r-- | package.json | 2 | ||||
| -rw-r--r-- | yarn.lock | 5 |
2 files changed, 6 insertions, 1 deletions
diff --git a/package.json b/package.json index da8348f0..3477a404 100644 --- a/package.json +++ b/package.json @@ -62,7 +62,7 @@ "jsdom-nogyp": "^0.8.3", "keymaster": "^1.6.2", "list.js": "^1.5.0", - "lodash": "^4.17.11", + "lodash": "^4.17.16", "lutim": "^1.0.2", "lz-string": "git+https://github.com/hackmdio/lz-string.git", "mariadb": "^2.1.2", @@ -5976,6 +5976,11 @@ lodash@4.17.x, lodash@^4.14.2, lodash@^4.17.11, lodash@^4.17.12, lodash@^4.17.14 resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.15.tgz#b447f6670a0455bbfeedd11392eff330ea097548" integrity sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A== +lodash@^4.17.16: + version "4.17.19" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b" + integrity sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ== + logform@^2.1.1: version "2.1.2" resolved "https://registry.yarnpkg.com/logform/-/logform-2.1.2.tgz#957155ebeb67a13164069825ce67ddb5bb2dd360" |