From 33d07006ba00a8582c2e63546bbd70637f636196 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 12 Sep 2024 03:23:44 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BODYPARSER-7926860 - https://snyk.io/vuln/SNYK-JS-EXPRESS-7926867 - https://snyk.io/vuln/SNYK-JS-SEND-7926862 - https://snyk.io/vuln/SNYK-JS-SERVESTATIC-7926865 --- package.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index 197427ce416..a6af88e8c1b 100644 --- a/package.json +++ b/package.json @@ -29,7 +29,7 @@ "archiver": "1.2.0", "bcryptjs": "2.3.0", "bluebird": "3.4.6", - "body-parser": "1.15.2", + "body-parser": "1.20.3", "brute-knex": "https://github.com/cobbspur/brute-knex/tarball/0cb28fa8e3230dcbf6bca8b991dbb340b9fff6cc", "bookshelf": "https://github.com/kirrg001/bookshelf/tarball/feature/creating-event-attached-models", "bunyan": "1.8.1", @@ -44,7 +44,7 @@ "csv-parser": "1.11.0", "debug": "2.2.0", "downsize": "0.0.8", - "express": "4.14.0", + "express": "4.21.0", "express-brute": "1.0.1", "express-hbs": "1.0.3", "extract-zip-fork": "1.5.1", @@ -52,7 +52,7 @@ "ghost-editor": "0.1.5", "ghost-gql": "0.0.5", "glob": "5.0.15", - "gscan": "0.1.1", + "gscan": "0.2.1", "html-to-text": "2.1.3", "image-size": "0.5.0", "intl": "1.2.5", @@ -72,7 +72,7 @@ "nodemailer": "0.7.1", "oauth2orize": "1.5.1", "passport": "0.3.2", - "passport-ghost": "2.2.0", + "passport-ghost": "2.2.4", "passport-http-bearer": "1.0.1", "passport-oauth2-client-password": "0.1.2", "path-match": "1.2.4",