From d8b548236a940a549bbf4acd4dd5fb0a465075b1 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 05:40:17 +0100 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 739c668..3cafeb4 100644 --- a/package.json +++ b/package.json @@ -10,7 +10,7 @@ "ldapjs": "^1.0.0", "node-cache": "^3.0.0", "o-mapper": "^0.1.2", - "snyk": "^1.189.0" + "snyk": "^1.316.1" }, "devDependencies": { "jshint": "^2.8.0", From 386e9de4db2ffeac8d9375c0a8a1a053a8591e66 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 05:40:18 +0100 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.snyk b/.snyk index e005d49..0c13677 100644 --- a/.snyk +++ b/.snyk @@ -1,8 +1,11 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.13.5 +version: v1.14.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: SNYK-JS-LODASH-450202: - node-cache > lodash: patched: '2019-07-04T04:39:22.493Z' + SNYK-JS-LODASH-567746: + - node-cache > lodash: + patched: '2020-05-01T04:40:15.062Z'