From 890fa547829352e4ad6000ce5a7f3333fbcd35e6 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 22 Sep 2022 15:12:45 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AJV-584908 - https://snyk.io/vuln/SNYK-JS-ASYNC-2441827 - https://snyk.io/vuln/SNYK-JS-BSON-561052 - https://snyk.io/vuln/SNYK-JS-EJS-1049328 - https://snyk.io/vuln/SNYK-JS-EJS-2803307 - https://snyk.io/vuln/SNYK-JS-EXPRESSVALIDATOR-174763 - https://snyk.io/vuln/SNYK-JS-HAWK-2808852 - https://snyk.io/vuln/SNYK-JS-MONGODB-473855 - https://snyk.io/vuln/SNYK-JS-MONGOOSE-1086688 - https://snyk.io/vuln/SNYK-JS-MONGOOSE-2961688 - https://snyk.io/vuln/SNYK-JS-MONGOOSE-472486 - https://snyk.io/vuln/SNYK-JS-MORGAN-72579 - https://snyk.io/vuln/SNYK-JS-MPATH-1577289 - https://snyk.io/vuln/SNYK-JS-MPATH-72672 - https://snyk.io/vuln/SNYK-JS-MQUERY-1050858 - https://snyk.io/vuln/SNYK-JS-MQUERY-1089718 - https://snyk.io/vuln/SNYK-JS-NODEMAILER-1038834 - https://snyk.io/vuln/SNYK-JS-NODEMAILER-1296415 - https://snyk.io/vuln/SNYK-JS-PASSPORT-2840631 - https://snyk.io/vuln/SNYK-JS-VALIDATOR-1090599 - https://snyk.io/vuln/SNYK-JS-VALIDATOR-1090600 - https://snyk.io/vuln/SNYK-JS-VALIDATOR-1090601 - https://snyk.io/vuln/SNYK-JS-VALIDATOR-1090602 --- package.json | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/package.json b/package.json index 3a3f06b..54f10c9 100644 --- a/package.json +++ b/package.json @@ -28,19 +28,19 @@ "connect-ensure-login": "0.1.1", "cookie-parser": "1.4.3", "dotenv": "5.0.1", - "ejs": "2.5.8", + "ejs": "3.1.7", "express": "4.16.2", "express-session": "^1.15.6", - "mongoose": "5.0.11", - "morgan": "1.9.0", - "passport": "0.4.0", + "mongoose": "5.13.15", + "morgan": "1.9.1", + "passport": "0.6.0", "passport-local": "1.0.0", - "request": "2.85.0", + "request": "2.88.0", "spdy": "3.4.7", "web-push": "3.3.0", - "nodemailer": "^4.6.7", + "nodemailer": "^6.6.1", "connect-flash": "^0.1.1", - "express-validator": "^5.2.0" + "express-validator": "^6.5.0" }, "devDependencies": { "csslint": "1.0.5",