From 22cd34d40110cf65305bc5ec2c9c47cc16079dd1 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 15:35:26 +0800 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index b07d35e..cc51141 100644 --- a/package.json +++ b/package.json @@ -27,7 +27,7 @@ "request": "^2.87.0", "request-promise-native": "^1.0.5", "tough-cookie": "^2.3.4", - "snyk": "^1.231.0" + "snyk": "^1.316.1" }, "devDependencies": { "easy-monitor": "^2.2.2", From 306d2c0fc9e4f42269dab4d03b1dbc243c8cbcfc Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 15:35:27 +0800 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.snyk b/.snyk index 8569593..69bdbdf 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.13.5 +version: v1.14.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -11,3 +11,6 @@ patch: patched: '2019-10-05T07:34:02.972Z' - snyk > proxy-agent > pac-proxy-agent > https-proxy-agent: patched: '2019-10-05T07:34:02.972Z' + SNYK-JS-LODASH-567746: + - request-promise-native > request-promise-core > lodash: + patched: '2020-05-01T07:35:23.473Z'