From fb42e92ba4f9482a02a03dafa290cd049b7a5f06 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 13 Mar 2023 12:56:14 +0000
Subject: [PATCH] fix: package.json & package-lock.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/npm:st:20140206
---
 package-lock.json | 19 +++++++++----------
 package.json      |  2 +-
 2 files changed, 10 insertions(+), 11 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index fef2be20353..157c17d6c6a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -27,16 +27,16 @@
         "jquery": "^2.2.4",
         "lodash": "4.17.4",
         "marked": "0.3.5",
-        "method-override": "latest",
+        "method-override": "^3.0.0",
         "moment": "2.15.1",
         "mongodb": "^3.5.9",
         "mongoose": "4.2.4",
-        "morgan": "latest",
+        "morgan": "^1.10.0",
         "ms": "^0.7.1",
         "mysql": "^2.18.1",
         "npmconf": "0.0.24",
         "optional": "^0.1.3",
-        "st": "0.2.4",
+        "st": "^0.2.5",
         "stream-buffers": "^3.0.1",
         "tap": "^11.1.3",
         "typeorm": "^0.2.24",
@@ -10928,10 +10928,9 @@
       }
     },
     "node_modules/st": {
-      "version": "0.2.4",
-      "resolved": "https://registry.npmjs.org/st/-/st-0.2.4.tgz",
-      "integrity": "sha1-lzGPVUhf/L5whuIrQNYXWJI8/6A=",
-      "deprecated": "Please upgrade to at least 0.2.5 for a security fix",
+      "version": "0.2.5",
+      "resolved": "https://registry.npmjs.org/st/-/st-0.2.5.tgz",
+      "integrity": "sha512-gDuruHdRio7Qb5XK5OKON5EnTNFoEeuR4QBrTzWaobCQYS4gtZZrWDzsccHjYeSfngRGXBBEAvPTvUpgJMQnWw==",
       "dependencies": {
         "async-cache": "~0.1.2",
         "fd": "~0.0.2",
@@ -21317,9 +21316,9 @@
       }
     },
     "st": {
-      "version": "0.2.4",
-      "resolved": "https://registry.npmjs.org/st/-/st-0.2.4.tgz",
-      "integrity": "sha1-lzGPVUhf/L5whuIrQNYXWJI8/6A=",
+      "version": "0.2.5",
+      "resolved": "https://registry.npmjs.org/st/-/st-0.2.5.tgz",
+      "integrity": "sha512-gDuruHdRio7Qb5XK5OKON5EnTNFoEeuR4QBrTzWaobCQYS4gtZZrWDzsccHjYeSfngRGXBBEAvPTvUpgJMQnWw==",
       "requires": {
         "async-cache": "~0.1.2",
         "fd": "~0.0.2",
diff --git a/package.json b/package.json
index d5f9362a36d..9313ed20f52 100644
--- a/package.json
+++ b/package.json
@@ -42,7 +42,7 @@
     "mysql": "^2.18.1",
     "npmconf": "0.0.24",
     "optional": "^0.1.3",
-    "st": "0.2.4",
+    "st": "0.2.5",
     "stream-buffers": "^3.0.1",
     "tap": "^11.1.3",
     "typeorm": "^0.2.24",