From c611f28176ab1265419f5d079886a51b4cb278ad Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 28 Aug 2020 01:16:17 +0000 Subject: [PATCH] fix: server/package.json & server/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-608086 --- server/package-lock.json | 6 +++--- server/package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/server/package-lock.json b/server/package-lock.json index 0784d3e..9ac344f 100644 --- a/server/package-lock.json +++ b/server/package-lock.json @@ -321,9 +321,9 @@ } }, "lodash": { - "version": "4.17.13", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.13.tgz", - "integrity": "sha512-vm3/XWXfWtRua0FkUyEHBZy8kCPjErNBT9fJx8Zvs+U6zjqPbTUOpkaoum3O5uiA8sm+yNMHXfYkTUHFoMxFNA==" + "version": "4.17.17", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.17.tgz", + "integrity": "sha512-/B2DjOphAoqi5BX4Gg2oh4UR0Gy/A7xYAMh3aSECEKzwS3eCDEpS0Cals1Ktvxwlal3bBJNc+5W9kNIcADdw5Q==" }, "pino": { "version": "5.12.6", diff --git a/server/package.json b/server/package.json index c24d718..f2a212f 100644 --- a/server/package.json +++ b/server/package.json @@ -40,7 +40,7 @@ "commander": "^3.0.0", "hapi": "^18.1.0", "joi": "^14.3.1", - "lodash": "^4.17.13", + "lodash": "^4.17.17", "pino": "^5.12.6" } }