From b618e6a8d439f7810460fee70aae10e72359618a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 09:14:38 +0100 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 29242cf..66d4550 100644 --- a/package.json +++ b/package.json @@ -47,7 +47,7 @@ "passport-github": "^1.1.0", "passport-local": "^1.0.0", "passport-twitter": "^1.0.4", - "snyk": "^1.49.1" + "snyk": "^1.316.1" }, "devDependencies": {}, "engines": { From bef447878a17a84e6677b3a7a6b5843e3658b528 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 09:14:39 +0100 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/.snyk b/.snyk index de3b8b7..46664cb 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.1 +version: v1.14.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -9,3 +9,18 @@ patch: 'npm:ms:20170412': - express-status-monitor > socket.io > socket.io-adapter > socket.io-parser > debug > ms: patched: '2017-10-11T11:21:12.468Z' + SNYK-JS-LODASH-567746: + - async > lodash: + patched: '2020-05-01T08:14:36.275Z' + - bookshelf > lodash: + patched: '2020-05-01T08:14:36.275Z' + - express-validator > lodash: + patched: '2020-05-01T08:14:36.275Z' + - knex > lodash: + patched: '2020-05-01T08:14:36.275Z' + - node-sass > lodash: + patched: '2020-05-01T08:14:36.275Z' + - node-sass > sass-graph > lodash: + patched: '2020-05-01T08:14:36.275Z' + - node-sass > gaze > globule > lodash: + patched: '2020-05-01T08:14:36.275Z'