From 565ae146389d181c02ec9dfd55c4abfab7f86435 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 30 May 2020 03:20:13 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 5 ++++- package.json | 2 +- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index 3aefdd01..93e8525d 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.10.1 +version: v1.14.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -67,3 +67,6 @@ patch: 'npm:uglify-js:20151024': - harp > terraform > jade > transformers > uglify-js: patched: '2018-01-20T00:41:27.861Z' + SNYK-JS-LODASH-567746: + - marky-markdown > sanitize-html > lodash: + patched: '2020-05-30T03:20:11.236Z' diff --git a/package.json b/package.json index 9044154b..7fa56b93 100644 --- a/package.json +++ b/package.json @@ -46,7 +46,7 @@ "npm": "latest5.7.0", "strftime": "^0.10.0", "walkdir": "0.0.12", - "snyk": "^1.69.1" + "snyk": "^1.332.1" }, "devDependencies": { "cheerio": "^0.22.0",