From 556e880814b248c79c382903eecd7fd4b2123280 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 11 Oct 2017 14:00:55 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:qs:20170213 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:ms:20170412 - https://snyk.io/vuln/npm:ms:20151024 - https://snyk.io/vuln/npm:ejs:20161130 - https://snyk.io/vuln/npm:ejs:20161130-1 - https://snyk.io/vuln/npm:ejs:20161128 - https://snyk.io/vuln/npm:mime:20170907 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:fresh:20170908 - https://snyk.io/vuln/npm:ms:20170412 - https://snyk.io/vuln/npm:qs:20170213 - https://snyk.io/vuln/npm:negotiator:20160616 - https://snyk.io/vuln/npm:ms:20151024 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:ms:20170412 - https://snyk.io/vuln/npm:fresh:20170908 - https://snyk.io/vuln/npm:ms:20170412 Latest report for stanzhengdev/monarchs-can-hack: https://snyk.io/test/github/stanzhengdev/monarchs-can-hack --- package.json | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/package.json b/package.json index 1727175..d97de1b 100644 --- a/package.json +++ b/package.json @@ -6,14 +6,14 @@ "start": "node api/bin/www" }, "dependencies": { - "body-parser": "~1.10.1", + "body-parser": "~1.17.1", "cookie-parser": "~1.3.3", - "debug": "~2.1.1", - "ejs": "~2.1.4", - "express": "~4.11.0", + "debug": "~2.6.9", + "ejs": "~2.5.5", + "express": "~4.16.0", "lodash": "^3.5.0", - "morgan": "~1.5.1", - "serve-favicon": "~2.2.0", + "morgan": "~1.9.0", + "serve-favicon": "~2.4.5", "twitter": "^1.2.5" } }