From f38419600ba48ce3234cd3a224ffc91058b5c3cb Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 16 Jan 2022 16:41:31 +0000 Subject: [PATCH] fix: docs/package.json & docs/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MARKED-2342073 - https://snyk.io/vuln/SNYK-JS-MARKED-2342082 --- docs/package.json | 2 +- docs/yarn.lock | 9 +++++---- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/docs/package.json b/docs/package.json index 2d654640dd64..1de1dda5f2e6 100644 --- a/docs/package.json +++ b/docs/package.json @@ -37,7 +37,7 @@ "global": "^4.3.2", "highlight.js": "^9.12.0", "lodash": "^4.17.5", - "marked": "^0.3.17", + "marked": "^4.0.10", "prop-types": "^15.6.1", "react": "^15.6.1", "react-document-title": "^2.0.3", diff --git a/docs/yarn.lock b/docs/yarn.lock index e130c49e1603..30ed68365378 100644 --- a/docs/yarn.lock +++ b/docs/yarn.lock @@ -6766,14 +6766,15 @@ markdown-table@^1.1.0: version "1.1.1" resolved "https://registry.yarnpkg.com/markdown-table/-/markdown-table-1.1.1.tgz#4b3dd3a133d1518b8ef0dbc709bf2a1b4824bc8c" -marked@^0.3.17: - version "0.3.17" - resolved "https://registry.yarnpkg.com/marked/-/marked-0.3.17.tgz#607f06668b3c6b1246b28f13da76116ac1aa2d2b" - marked@^0.3.6: version "0.3.9" resolved "https://registry.yarnpkg.com/marked/-/marked-0.3.9.tgz#54ce6a57e720c3ac6098374ec625fcbcc97ff290" +marked@^4.0.10: + version "4.0.10" + resolved "https://registry.yarnpkg.com/marked/-/marked-4.0.10.tgz#423e295385cc0c3a70fa495e0df68b007b879423" + integrity sha512-+QvuFj0nGgO970fySghXGmuw+Fd0gD2x3+MqCWLIPf5oxdv1Ka6b2q+z9RP01P/IaKPMEramy+7cNy/Lw8c3hw== + math-expression-evaluator@^1.2.14: version "1.2.17" resolved "https://registry.yarnpkg.com/math-expression-evaluator/-/math-expression-evaluator-1.2.17.tgz#de819fdbcd84dccd8fae59c6aeb79615b9d266ac"