From d1dd1c7e79fca788dd86c2aff194c961ebb581c1 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 5 Feb 2019 07:20:45 +0000 Subject: [PATCH] fix: tools/eslint/package.json & tools/eslint/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-73638 - https://snyk.io/vuln/SNYK-JS-LODASH-73639 --- tools/eslint/package-lock.json | 32 +++++++++++++++++++++----------- tools/eslint/package.json | 2 +- 2 files changed, 22 insertions(+), 12 deletions(-) diff --git a/tools/eslint/package-lock.json b/tools/eslint/package-lock.json index 114bbc6e101d98..ee7584dcedccbb 100644 --- a/tools/eslint/package-lock.json +++ b/tools/eslint/package-lock.json @@ -505,6 +505,11 @@ "supports-color": "4.2.0" } }, + "lodash": { + "version": "4.17.4", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz", + "integrity": "sha1-eCA6TRwyiuHYbcpkYONptX9AVa4=" + }, "strip-ansi": { "version": "4.0.0", "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz", @@ -658,9 +663,9 @@ } }, "lodash": { - "version": "4.17.4", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz", - "integrity": "sha1-eCA6TRwyiuHYbcpkYONptX9AVa4=" + "version": "4.17.11", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz", + "integrity": "sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg==" }, "markdown-escapes": { "version": "1.0.0", @@ -932,14 +937,6 @@ "resolved": "https://registry.npmjs.org/state-toggle/-/state-toggle-1.0.0.tgz", "integrity": "sha1-0g+aYWu08MO5i5GSLSW2QKorxCU=" }, - "string_decoder": { - "version": "1.0.3", - "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.0.3.tgz", - "integrity": "sha512-4AH6Z5fzNNBcH+6XDMfA/BTt87skxqJlO0lAh3Dker5zThcAxG6mKz+iGu308UKoPPQ8Dcqx/4JhujzltRa+hQ==", - "requires": { - "safe-buffer": "5.1.1" - } - }, "string-width": { "version": "2.1.0", "resolved": "https://registry.npmjs.org/string-width/-/string-width-2.1.0.tgz", @@ -964,6 +961,14 @@ } } }, + "string_decoder": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.0.3.tgz", + "integrity": "sha512-4AH6Z5fzNNBcH+6XDMfA/BTt87skxqJlO0lAh3Dker5zThcAxG6mKz+iGu308UKoPPQ8Dcqx/4JhujzltRa+hQ==", + "requires": { + "safe-buffer": "5.1.1" + } + }, "strip-ansi": { "version": "3.0.1", "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz", @@ -1003,6 +1008,11 @@ "co": "4.6.0", "json-stable-stringify": "1.0.1" } + }, + "lodash": { + "version": "4.17.4", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz", + "integrity": "sha1-eCA6TRwyiuHYbcpkYONptX9AVa4=" } } }, diff --git a/tools/eslint/package.json b/tools/eslint/package.json index 5d9698e6c35477..f798c4adbfec1f 100644 --- a/tools/eslint/package.json +++ b/tools/eslint/package.json @@ -57,7 +57,7 @@ "js-yaml": "^3.8.4", "json-stable-stringify": "^1.0.1", "levn": "^0.3.0", - "lodash": "^4.17.4", + "lodash": "^4.17.11", "minimatch": "^3.0.2", "mkdirp": "^0.5.1", "natural-compare": "^1.4.0",