From 581243e2f3e4b6e7960ca24688da9ec00e0e57a4 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 3 Aug 2021 03:35:14 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-UNDERSCORE-1080984 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index ff2a117..38dd9a8 100644 --- a/package-lock.json +++ b/package-lock.json @@ -18,7 +18,7 @@ "ipaddr.js": "^1.9.1", "leancloud-cors-headers": "^0.1.0", "on-headers": "^1.0.1", - "underscore": "^1.10.2" + "underscore": "^1.12.1" }, "devDependencies": { "@types/express": "^4.17.6", @@ -2552,9 +2552,9 @@ } }, "node_modules/underscore": { - "version": "1.10.2", - "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.10.2.tgz", - "integrity": "sha512-N4P+Q/BuyuEKFJ43B9gYuOj4TQUHXX+j2FqguVOpjkssLUUrnJofCcBccJSCoeturDoZU6GorDTHSvUDlSQbTg==" + "version": "1.12.1", + "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz", + "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw==" }, "node_modules/unpipe": { "version": "1.0.0", @@ -4761,9 +4761,9 @@ "dev": true }, "underscore": { - "version": "1.10.2", - "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.10.2.tgz", - "integrity": "sha512-N4P+Q/BuyuEKFJ43B9gYuOj4TQUHXX+j2FqguVOpjkssLUUrnJofCcBccJSCoeturDoZU6GorDTHSvUDlSQbTg==" + "version": "1.12.1", + "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz", + "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw==" }, "unpipe": { "version": "1.0.0", diff --git a/package.json b/package.json index d60617d..735af46 100644 --- a/package.json +++ b/package.json @@ -16,7 +16,7 @@ "ipaddr.js": "^1.9.1", "leancloud-cors-headers": "^0.1.0", "on-headers": "^1.0.1", - "underscore": "^1.10.2" + "underscore": "^1.12.1" }, "devDependencies": { "@types/express": "^4.17.6",