From 4973f27e519bcac45292cb587bb14c326a874dc3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 8 Jul 2022 04:51:03 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MOMENT-2944238 --- package.json | 2 +- yarn.lock | 7 ++++++- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 28af1bb..0a22170 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,7 @@ "into-stream": "^6.0.0", "joi": "^17.3.0", "jsonwebtoken": "^8.5.1", - "moment": "^2.29.1", + "moment": "^2.29.4", "moment-timezone": "^0.5.32", "multer": "^1.4.2", "passport": "^0.4.1", diff --git a/yarn.lock b/yarn.lock index 0067660..0bf69c0 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3308,11 +3308,16 @@ moment-timezone@^0.5.32: dependencies: moment ">= 2.9.0" -"moment@>= 2.9.0", moment@^2.29.1: +"moment@>= 2.9.0": version "2.29.1" resolved "https://registry.yarnpkg.com/moment/-/moment-2.29.1.tgz#b2be769fa31940be9eeea6469c075e35006fa3d3" integrity sha512-kHmoybcPV8Sqy59DwNDY3Jefr64lK/by/da0ViFcuA4DH0vQg5Q6Ze5VimxkfQNSC+Mls/Kx53s7TjP1RhFEDQ== +moment@^2.29.4: + version "2.29.4" + resolved "https://registry.yarnpkg.com/moment/-/moment-2.29.4.tgz#3dbe052889fe7c1b2ed966fcb3a77328964ef108" + integrity sha512-5LC9SOxjSc2HF6vO2CyuTDNivEdoz2IvyJJGj6X8DJ0eFyfszE0QiEd+iXmBvUP3WHxSjFH/vIsA0EN00cgr8w== + ms@2.0.0: version "2.0.0" resolved "https://registry.yarnpkg.com/ms/-/ms-2.0.0.tgz#5608aeadfc00be6c2901df5f9861788de0d597c8"