From f12108a64c5fef199f4cc1ac876b7ac34256d481 Mon Sep 17 00:00:00 2001 From: snyk-test Date: Thu, 4 Jul 2019 03:36:56 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- .snyk | 33 ++++++++++++++++++++++++++++++++- package.json | 2 +- 2 files changed, 33 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index 46350d1f..664557d2 100644 --- a/.snyk +++ b/.snyk @@ -1,8 +1,39 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.0 +version: v1.13.5 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: 'npm:ms:20170412': - mocha > debug > ms: patched: '2017-05-22T00:11:05.815Z' + SNYK-JS-LODASH-450202: + - jsdoc > requizzle > lodash: + patched: '2019-07-04T03:36:53.507Z' + - snyk > lodash: + patched: '2019-07-04T03:36:53.507Z' + - restify-clients > lodash: + patched: '2019-07-04T03:36:53.507Z' + - jsdoc > catharsis > lodash: + patched: '2019-07-04T03:36:53.507Z' + - snyk > snyk-nuget-plugin > lodash: + patched: '2019-07-04T03:36:53.507Z' + - snyk > snyk-nodejs-lockfile-parser > lodash: + patched: '2019-07-04T03:36:53.507Z' + - snyk > snyk-mvn-plugin > lodash: + patched: '2019-07-04T03:36:53.507Z' + - jshint > lodash: + patched: '2019-07-04T03:36:53.507Z' + - snyk > inquirer > lodash: + patched: '2019-07-04T03:36:53.507Z' + - snyk > snyk-config > lodash: + patched: '2019-07-04T03:36:53.507Z' + - snyk > @snyk/dep-graph > lodash: + patched: '2019-07-04T03:36:53.507Z' + - snyk > snyk-nodejs-lockfile-parser > graphlib > lodash: + patched: '2019-07-04T03:36:53.507Z' + - snyk > snyk-go-plugin > graphlib > lodash: + patched: '2019-07-04T03:36:53.507Z' + - snyk > @snyk/dep-graph > graphlib > lodash: + patched: '2019-07-04T03:36:53.507Z' + - snyk > snyk-php-plugin > @snyk/composer-lockfile-parser > lodash: + patched: '2019-07-04T03:36:53.507Z' diff --git a/package.json b/package.json index e191cc8e..b91beb40 100644 --- a/package.json +++ b/package.json @@ -51,7 +51,7 @@ "jshint": "^2.9.4", "mocha": "^3.2.0", "restify-clients": "^1.5.0", - "snyk": "^1.36.2" + "snyk": "^1.189.0" }, "snyk": true }