From 6fd1bb3af5d741d2d0205c9086311e01b5ea8b95 Mon Sep 17 00:00:00 2001 From: snyk-test Date: Thu, 4 Jul 2019 05:47:13 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- .snyk | 29 ++++++++++++++++++++++++++++- package.json | 2 +- 2 files changed, 29 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index 928fc15..c849b54 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.1 +version: v1.13.5 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -62,3 +62,30 @@ patch: patched: '2017-10-11T14:00:55.397Z' - hubot > express > connect > serve-index > accepts > negotiator: patched: '2017-10-11T14:00:55.397Z' + SNYK-JS-LODASH-450202: + - hubot-slack > @slack/client > lodash: + patched: '2019-07-04T05:47:10.579Z' + - snyk > lodash: + patched: '2019-07-04T05:47:10.579Z' + - snyk > snyk-nuget-plugin > lodash: + patched: '2019-07-04T05:47:10.579Z' + - snyk > snyk-nodejs-lockfile-parser > lodash: + patched: '2019-07-04T05:47:10.579Z' + - snyk > snyk-mvn-plugin > lodash: + patched: '2019-07-04T05:47:10.579Z' + - snyk > @snyk/dep-graph > lodash: + patched: '2019-07-04T05:47:10.579Z' + - hubot-slack > lodash: + patched: '2019-07-04T05:47:10.579Z' + - snyk > snyk-config > lodash: + patched: '2019-07-04T05:47:10.579Z' + - snyk > inquirer > lodash: + patched: '2019-07-04T05:47:10.579Z' + - snyk > snyk-nodejs-lockfile-parser > graphlib > lodash: + patched: '2019-07-04T05:47:10.579Z' + - snyk > snyk-go-plugin > graphlib > lodash: + patched: '2019-07-04T05:47:10.579Z' + - snyk > @snyk/dep-graph > graphlib > lodash: + patched: '2019-07-04T05:47:10.579Z' + - snyk > snyk-php-plugin > @snyk/composer-lockfile-parser > lodash: + patched: '2019-07-04T05:47:10.579Z' diff --git a/package.json b/package.json index 95e659b..4c31f86 100644 --- a/package.json +++ b/package.json @@ -20,7 +20,7 @@ "hubot-slack": "^4.0.0", "hubot-youtube": "^0.1.2", "nodepie": "^0.6.6", - "snyk": "^1.42.6" + "snyk": "^1.189.0" }, "engines": { "node": "0.10.x"