From a8025d561ce4ccf3a45f44744f30e7e3711d924e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 19 Oct 2019 01:26:21 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MONGODB-473855 --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 80883e7..b69bdfb 100644 --- a/package.json +++ b/package.json @@ -8,7 +8,7 @@ "body-parser": "^1.13.3", "composable-middleware": "^0.3.0", "compression": "^1.5.2", - "connect-mongo": "^0.8.1", + "connect-mongo": "^3.0.0", "cookie-parser": "^1.3.5", "ejs": "^2.3.3", "errorhandler": "^1.4.2", @@ -17,7 +17,7 @@ "lodash": "^3.10.1", "lusca": "^1.3.0", "method-override": "^2.3.5", - "mongoose": "^4.1.2", + "mongoose": "^5.4.10", "morgan": "~1.6.1", "serve-favicon": "^2.3.0", "socket.io": "^1.3.5",