From a97db2b3f177a44c53c1231816e69873e577b858 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 16 Apr 2024 04:00:54 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-6139239 --- package.json | 2 +- yarn.lock | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index c2000c7..54a20a2 100644 --- a/package.json +++ b/package.json @@ -34,6 +34,6 @@ "babel-preset-env": "^1.6.0", "babel-register": "^6.26.0", "dotenv": "^4.0.0", - "lodash": "^4.17.4" + "lodash": "^4.17.17" } } diff --git a/yarn.lock b/yarn.lock index 8957eeb..0287704 100644 --- a/yarn.lock +++ b/yarn.lock @@ -767,6 +767,11 @@ load-json-file@^4.0.0: pify "^3.0.0" strip-bom "^3.0.0" +lodash@^4.17.17: + version "4.17.21" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c" + integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg== + lodash@^4.17.4: version "4.17.4" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.4.tgz#78203a4d1c328ae1d86dca6460e369b57f4055ae"