From fa2c5e352d56e62bea48cc99ac9bb60ce8788970 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 30 Apr 2020 22:20:51 -0500 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 9044154b..ff64954d 100644 --- a/package.json +++ b/package.json @@ -46,7 +46,7 @@ "npm": "latest5.7.0", "strftime": "^0.10.0", "walkdir": "0.0.12", - "snyk": "^1.69.1" + "snyk": "^1.316.1" }, "devDependencies": { "cheerio": "^0.22.0", From c8e13e8c4156d60f1e8ad8d806cd1585695a4813 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 30 Apr 2020 22:20:52 -0500 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/.snyk b/.snyk index 3aefdd01..612bb890 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.10.1 +version: v1.14.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -67,3 +67,16 @@ patch: 'npm:uglify-js:20151024': - harp > terraform > jade > transformers > uglify-js: patched: '2018-01-20T00:41:27.861Z' + SNYK-JS-LODASH-567746: + - harp > terraform > lodash: + patched: '2020-05-01T03:20:42.288Z' + - lodash: + patched: '2020-05-01T03:20:42.288Z' + - marky-markdown > highlights > first-mate-select-grammar > lodash: + patched: '2020-05-01T03:20:42.288Z' + - harp > terraform > node-sass > sass-graph > lodash: + patched: '2020-05-01T03:20:42.288Z' + - harp > terraform > jjade > constantinople > babel-types > lodash: + patched: '2020-05-01T03:20:42.288Z' + - harp > terraform > node-sass > gaze > globule > lodash: + patched: '2020-05-01T03:20:42.288Z'