From cb14c34a5be1554966c8d6ae34822c022ba0346b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 19 Feb 2024 16:01:25 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-IP-6240864 --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index a5cdca0..4c4fe75 100644 --- a/package.json +++ b/package.json @@ -32,7 +32,7 @@ "crypto-random-string": "^5.0.0", "del": "^6.0.0", "humanize-string": "^3.0.0", - "ip": "^1.1.5", + "ip": "^1.1.9", "koa-jwt": "^4.0.1", "koa-sse-stream": "^0.2.0", "lodash": "^4.17.20", diff --git a/yarn.lock b/yarn.lock index fc4d72c..452dd05 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5876,10 +5876,10 @@ ioredis@^4.17.3: redis-parser "^3.0.0" standard-as-callback "^2.1.0" -ip@^1.1.5: - version "1.1.8" - resolved "https://registry.npmjs.org/ip/-/ip-1.1.8.tgz#ae05948f6b075435ed3307acce04629da8cdbf48" - integrity sha512-PuExPYUiu6qMBQb4l06ecm6T6ujzhmh+MeJcW9wa89PoAz5pvd4zPgN5WJV104mb6S2T1AwNIAaB70JNrLQWhg== +ip@^1.1.9: + version "1.1.9" + resolved "https://registry.yarnpkg.com/ip/-/ip-1.1.9.tgz#8dfbcc99a754d07f425310b86a99546b1151e396" + integrity sha512-cyRxvOEpNHNtchU3Ln9KC/auJgup87llfQpQ+t5ghoC/UhL16SWzbueiCsdTnWmqAWl7LadfuwhlqmtOaqMHdQ== irregular-plurals@^2.0.0: version "2.0.0"