From c7d8c284efa59cda8793868143f03f3d813f679d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 30 Mar 2021 19:30:25 +0000 Subject: [PATCH] fix: server/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-MORGAN-72579 - https://snyk.io/vuln/SNYK-JS-SOCKETIO-1024859 - https://snyk.io/vuln/SNYK-JS-XMLHTTPREQUEST-1082935 - https://snyk.io/vuln/npm:base64-url:20180512 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:fresh:20170908 - https://snyk.io/vuln/npm:mime:20170907 - https://snyk.io/vuln/npm:ms:20170412 - https://snyk.io/vuln/npm:negotiator:20160616 - https://snyk.io/vuln/npm:qs:20170213 - https://snyk.io/vuln/npm:uglify-js:20151024 - https://snyk.io/vuln/npm:ws:20160104 - https://snyk.io/vuln/npm:ws:20160624 - https://snyk.io/vuln/npm:ws:20160920 - https://snyk.io/vuln/npm:ws:20171108 --- server/package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/server/package.json b/server/package.json index fc55a6d..6c306e4 100644 --- a/server/package.json +++ b/server/package.json @@ -4,8 +4,8 @@ "author": "Minko Gechev @mgechev", "description": "Node.js server for mk.js", "dependencies": { - "express": "3.x.x", - "socket.io": "0.9.x" + "express": "4.16.0", + "socket.io": "2.4.0" }, "license": "MIT" }