From 1aa7e677844559341327a81b815c246003ea71a8 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 13:07:07 +0600 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index ac85186..a30d768 100644 --- a/package.json +++ b/package.json @@ -81,7 +81,7 @@ "qs": "^6.2.1", "request": "^2.75.0", "striptags": "^2.1.1", - "snyk": "^1.25.0" + "snyk": "^1.316.1" }, "snyk": true } From 93f3da996a0ed2d216dae55ac1684bbbe96f88d7 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 13:07:08 +0600 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/.snyk b/.snyk index de54052..b758409 100644 --- a/.snyk +++ b/.snyk @@ -1,8 +1,17 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.0 +version: v1.14.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: 'npm:marked:20170112': - blessed-contrib > marked: patched: '2017-02-10T14:48:34.665Z' + SNYK-JS-LODASH-567746: + - lodash: + patched: '2020-05-01T07:07:04.583Z' + - async > lodash: + patched: '2020-05-01T07:07:04.583Z' + - blessed-contrib > lodash: + patched: '2020-05-01T07:07:04.583Z' + - inquirer > lodash: + patched: '2020-05-01T07:07:04.583Z'