From 57efa3cafdc7883829d39806ce134f4e6217ee6d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 16 Apr 2024 06:10:39 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-6139239 --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 34db3db..7676803 100644 --- a/package.json +++ b/package.json @@ -27,7 +27,7 @@ "bluebird": "^2.10.2", "boom": "^3.0.0", "cli-table": "^0.3.1", - "convict": "^1.0.1", + "convict": "^2.0.0", "cryptiles": "^3.0.0", "dataloader": "^1.2.0", "dot": "^1.0.3", @@ -44,7 +44,7 @@ "invariant": "^2.1.0", "jsonwebtoken": "^5.0.1", "kerberos": "0.0.17", - "lodash": "^3.10.1", + "lodash": "^4.17.17", "minimist": "^1.1.2", "mongodb": "^2.2.6", "node-fetch": "^1.3.3",