From d6b37f2300d463e4ed4c68d54e7739ed26a71f6a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 17 Aug 2020 01:16:09 +0000 Subject: [PATCH] fix: server/package.json & server/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-590103 --- server/package-lock.json | 6 +++--- server/package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/server/package-lock.json b/server/package-lock.json index 0784d3e..8002cc1 100644 --- a/server/package-lock.json +++ b/server/package-lock.json @@ -321,9 +321,9 @@ } }, "lodash": { - "version": "4.17.13", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.13.tgz", - "integrity": "sha512-vm3/XWXfWtRua0FkUyEHBZy8kCPjErNBT9fJx8Zvs+U6zjqPbTUOpkaoum3O5uiA8sm+yNMHXfYkTUHFoMxFNA==" + "version": "4.17.20", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz", + "integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA==" }, "pino": { "version": "5.12.6", diff --git a/server/package.json b/server/package.json index c24d718..63d8cbb 100644 --- a/server/package.json +++ b/server/package.json @@ -40,7 +40,7 @@ "commander": "^3.0.0", "hapi": "^18.1.0", "joi": "^14.3.1", - "lodash": "^4.17.13", + "lodash": "^4.17.20", "pino": "^5.12.6" } }