Merge pull request #93 from auth0/IPS-2729

fix: update async and moment dependencies to fix reported CVEs
auth0 · Aug 26, 2022 · b5e8e56 · b5e8e56
2 parents 3967c53 + 663a73e
commit b5e8e56
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/package.json b/package.json
@@ -23,8 +23,8 @@
   "license": "MIT",
   "dependencies": {
     "@xmldom/xmldom": "^0.7.4",
-    "async": "~0.2.9",
-    "moment": "2.19.3",
+    "async": "^3.2.4",
+    "moment": "^2.29.4",
     "valid-url": "~1.0.9",
     "xml-crypto": "^2.1.3",
     "xml-encryption": "^2.0.0",