From bfb7b5b393973626c9b970af09b81e5925d47b79 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 28 Nov 2023 19:19:19 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASHSET-1320032 - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-REQUEST-3361831 - https://snyk.io/vuln/npm:hoek:20180212 --- package.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package.json b/package.json index 0fd54cc..9b94d53 100644 --- a/package.json +++ b/package.json @@ -35,7 +35,7 @@ ] }, "dependencies": { - "auth0": "2.17.0", + "auth0": "2.25.0", "auth0-extension-express-tools": "^1.1.9", "auth0-extension-tools": "^1.3.3", "auth0-oauth2-express": "1.2.0", @@ -43,8 +43,8 @@ "cors": "2.8.1", "crypto": "^0.0.3", "express": "4.14.0", - "express-jwt": "^5.1.0", - "handlebars": "^4.0.5", + "express-jwt": "^6.1.1", + "handlebars": "^4.7.4", "jsonwebtoken": "^7.1.9", "lodash": "^4.16.4", "nconf": "^0.8.4",