From 6c2e7ba78995b2244f42c8878354df0457f4bb25 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 11 Jul 2020 06:49:11 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 2 +- yarn.lock | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index c2000c7..bf24399 100644 --- a/package.json +++ b/package.json @@ -34,6 +34,6 @@ "babel-preset-env": "^1.6.0", "babel-register": "^6.26.0", "dotenv": "^4.0.0", - "lodash": "^4.17.4" + "lodash": "^4.17.16" } } diff --git a/yarn.lock b/yarn.lock index 8957eeb..45f1868 100644 --- a/yarn.lock +++ b/yarn.lock @@ -767,6 +767,11 @@ load-json-file@^4.0.0: pify "^3.0.0" strip-bom "^3.0.0" +lodash@^4.17.16: + version "4.17.19" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b" + integrity sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ== + lodash@^4.17.4: version "4.17.4" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.4.tgz#78203a4d1c328ae1d86dca6460e369b57f4055ae"