From 53c5dacc99c5541dfcaefc01d65f6104de88ce26 Mon Sep 17 00:00:00 2001 From: snyk-test Date: Mon, 8 Jul 2019 04:26:26 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- .snyk | 39 ++++++++++++++++++++++++++++++++++++++- package.json | 2 +- 2 files changed, 39 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index b65c2306..b8f61500 100644 --- a/.snyk +++ b/.snyk @@ -1,6 +1,43 @@ -version: v1.5.0 +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 ignore: {} +# patches apply the minimum changes required to fix a vulnerability patch: 'npm:uglify-js:20151024': - swig > uglify-js: patched: '2016-07-04T07:52:36.120Z' + SNYK-JS-LODASH-450202: + - snyk > snyk-nodejs-lockfile-parser > lodash: + patched: '2019-07-08T04:26:24.277Z' + - lodash: + patched: '2019-07-08T04:26:24.277Z' + - assetmanager > lodash: + patched: '2019-07-08T04:26:24.277Z' + - snyk > inquirer > lodash: + patched: '2019-07-08T04:26:24.277Z' + - mongoose > async > lodash: + patched: '2019-07-08T04:26:24.277Z' + - snyk > @snyk/dep-graph > lodash: + patched: '2019-07-08T04:26:24.277Z' + - snyk > snyk-config > lodash: + patched: '2019-07-08T04:26:24.277Z' + - snyk > snyk-mvn-plugin > lodash: + patched: '2019-07-08T04:26:24.277Z' + - snyk > lodash: + patched: '2019-07-08T04:26:24.277Z' + - snyk > snyk-nuget-plugin > lodash: + patched: '2019-07-08T04:26:24.277Z' + - assetmanager > grunt > grunt-legacy-log > lodash: + patched: '2019-07-08T04:26:24.277Z' + - snyk > @snyk/dep-graph > graphlib > lodash: + patched: '2019-07-08T04:26:24.277Z' + - snyk > snyk-go-plugin > graphlib > lodash: + patched: '2019-07-08T04:26:24.277Z' + - snyk > snyk-php-plugin > @snyk/composer-lockfile-parser > lodash: + patched: '2019-07-08T04:26:24.277Z' + - assetmanager > grunt > grunt-legacy-util > lodash: + patched: '2019-07-08T04:26:24.277Z' + - snyk > snyk-nodejs-lockfile-parser > graphlib > lodash: + patched: '2019-07-08T04:26:24.277Z' + - assetmanager > grunt > grunt-legacy-log > grunt-legacy-log-utils > lodash: + patched: '2019-07-08T04:26:24.277Z' diff --git a/package.json b/package.json index 49a3046a..24810750 100644 --- a/package.json +++ b/package.json @@ -46,7 +46,7 @@ "socketio-sticky-session": "^0.4.1", "swig": "^1.3.2", "uglify-js": "^2.7.0", - "snyk": "^1.17.5" + "snyk": "^1.192.3" }, "devDependencies": { "chai": "^3.5.0",