From 7c55c16d190eb9557b9e48347777a90da4a55514 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 28 Nov 2023 20:40:08 +0000 Subject: [PATCH] fix: src/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-REQUEST-3361831 - https://snyk.io/vuln/SNYK-JS-SOCKETIOPARSER-1056752 - https://snyk.io/vuln/SNYK-JS-SOCKETIOPARSER-3091012 - https://snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:ms:20170412 - https://snyk.io/vuln/npm:parsejson:20170908 --- src/package.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/src/package.json b/src/package.json index ca86258f5b4..dd760baa854 100644 --- a/src/package.json +++ b/src/package.json @@ -13,11 +13,11 @@ ], "dependencies" : { "etherpad-yajsml" : "0.0.2", - "request" : "2.55.0", + "request" : "2.80.0", "etherpad-require-kernel" : "1.0.9", "resolve" : "1.1.7", - "socket.io" : "1.6.0", - "ueberdb2" : "0.3.0", + "socket.io" : "2.0.0", + "ueberdb2" : "3.0.0", "express" : "4.13.4", "express-session" : "1.13.0", "cookie-parser" : "1.3.4", @@ -26,9 +26,9 @@ "uglify-js" : "2.6.2", "formidable" : "1.0.17", "log4js" : "0.6.35", - "cheerio" : "0.20.0", + "cheerio" : "0.22.0", "async-stacktrace" : "0.0.2", - "npm" : "4.0.2", + "npm" : "7.0.0", "ejs" : "2.4.1", "graceful-fs" : "4.1.3", "slide" : "1.1.6",