From d0986516942e9ca413fff3a231a0014330879a00 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 5 May 2020 01:50:03 -0400 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index db835c58..d7833d26 100644 --- a/package.json +++ b/package.json @@ -61,7 +61,7 @@ "lodash": "^3.10.1", "minimist": "*", "node-schedule": "^0.1.13", - "snyk": "^1.19.1" + "snyk": "^1.317.0" }, "devDependencies": { "body-parser": "~1.8.1", From c6693025c11105c01f68d2ea6498b71b56cede86 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 5 May 2020 01:50:04 -0400 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.snyk b/.snyk index 556a6458..945d4f74 100644 --- a/.snyk +++ b/.snyk @@ -1,6 +1,11 @@ -version: v1.5.0 +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 ignore: {} +# patches apply the minimum changes required to fix a vulnerability patch: 'npm:request:20160119': - googleapis > google-auth-library > request: patched: '2016-09-20T14:31:33.007Z' + SNYK-JS-LODASH-567746: + - googleapis > async > lodash: + patched: '2020-05-05T05:49:57.988Z'