From 2834bb9f93f0bf71ceeda65961b339d9669ef942 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 15 Apr 2024 19:21:34 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-6139239 --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 6ce22d9..f2bfa38 100644 --- a/package.json +++ b/package.json @@ -19,7 +19,7 @@ "author": "kos984@gmail.com", "license": "MIT", "dependencies": { - "lodash": "^4.17.15", + "lodash": "^4.17.17", "validatorjs": "^3.15.1" }, "devDependencies": { diff --git a/yarn.lock b/yarn.lock index b9d439a..3e55370 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2161,10 +2161,10 @@ lodash@^4.13.1, lodash@^4.17.10, lodash@^4.17.4: version "4.17.10" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.10.tgz#1b7793cf7259ea38fb3661d4d38b3260af8ae4e7" -lodash@^4.17.15: - version "4.17.15" - resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.15.tgz#b447f6670a0455bbfeedd11392eff330ea097548" - integrity sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A== +lodash@^4.17.17: + version "4.17.21" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c" + integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg== longest@^1.0.1: version "1.0.1"