From 5d542bcfa734f8342c3bf5d714b8cbd1950b8684 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 7 May 2021 14:24:20 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 7 ++++++- package.json | 2 +- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index 314aa39..224c76f 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.14.1 +version: v1.19.0 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -31,3 +31,8 @@ patch: SNYK-JS-TREEKILL-536781: - snyk > snyk-sbt-plugin > tree-kill: patched: '2019-12-11T21:15:26.602Z' + SNYK-JS-LODASH-567746: + - snyk > snyk-nodejs-lockfile-parser > @yarnpkg/core > lodash: + patched: '2021-05-07T14:24:19.700Z' + - snyk > snyk-docker-plugin > snyk-nodejs-lockfile-parser > @yarnpkg/core > lodash: + patched: '2021-05-07T14:24:19.700Z' diff --git a/package.json b/package.json index 2eb7722..87d205a 100644 --- a/package.json +++ b/package.json @@ -46,7 +46,7 @@ "chalk": "^2.4.2", "commander": "^3.0.2", "prettier": "^1.16.1", - "snyk": "^1.298.1", + "snyk": "^1.586.0", "vue-template-compiler": "^2.5.21" }, "devDependencies": {