From 658ea3aa57770ac8b1ff04625a05caa7dba2cc00 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 2 Jul 2020 00:27:14 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-EXPRESSJWT-575022 --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 19414ed9..4ba5e247 100644 --- a/package.json +++ b/package.json @@ -53,7 +53,7 @@ "debug": "^3.1.0", "dotenv": "^4.0.0", "express": "^4.16.2", - "express-jwt": "^5.3.1", + "express-jwt": "^6.0.0", "express-validation": "^1.0.2", "express-winston": "^2.5.0", "helmet": "^3.22.0", diff --git a/yarn.lock b/yarn.lock index 64531407..2f39a883 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3233,10 +3233,10 @@ expect-ct@0.2.0: resolved "https://registry.yarnpkg.com/expect-ct/-/expect-ct-0.2.0.tgz#3a54741b6ed34cc7a93305c605f63cd268a54a62" integrity sha512-6SK3MG/Bbhm8MsgyJAylg+ucIOU71/FzyFalcfu5nY19dH8y/z0tBJU0wrNBXD4B27EoQtqPF/9wqH0iYAd04g== -express-jwt@^5.3.1: - version "5.3.1" - resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-5.3.1.tgz#66f05c7dddb5409c037346a98b88965bb10ea4ae" - integrity sha512-1C9RNq0wMp/JvsH/qZMlg3SIPvKu14YkZ4YYv7gJQ1Vq+Dv8LH9tLKenS5vMNth45gTlEUGx+ycp9IHIlaHP/g== +express-jwt@^6.0.0: + version "6.0.0" + resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-6.0.0.tgz#20886c730983ffb1c706a4383235df86eff349b8" + integrity sha512-C26y9myRjx7CyhZ+BAT3p+gQyRCoDZ7qo8plCvLDaRT6je6ALIAQknT6XLVQGFKwIy/Ux7lvM2MNap5dt0T7gA== dependencies: async "^1.5.0" express-unless "^0.3.0"