From 60c45ad3f3f74e39ea7f0ed40f412904a4140b09 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 23:00:13 -0500 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 02033eb..e5aeaf6 100644 --- a/package.json +++ b/package.json @@ -65,6 +65,6 @@ "@djanta/djantajs-compiler-rc": "^1.0.3", "lodash": "^4.17.11", "semver": "^5.5.1", - "snyk": "^1.192.3" + "snyk": "^1.316.2" } } From 66d42b2fc2b62b6519fd2ee17e48ea176821e6e4 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 23:00:14 -0500 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 35 ++++++++++++++++++++++++++++++++++- 1 file changed, 34 insertions(+), 1 deletion(-) diff --git a/.snyk b/.snyk index 541a0de..0fd50cc 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.13.5 +version: v1.14.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -105,3 +105,36 @@ patch: patched: '2019-07-06T03:59:52.771Z' - grunt-contrib-nodeunit > nodeunit-x > tap > nyc > istanbul-lib-instrument > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash: patched: '2019-07-06T03:59:52.771Z' + SNYK-JS-LODASH-567746: + - lodash: + patched: '2020-05-02T04:00:11.443Z' + - '@djanta/djantajs-compiler-rc > lodash': + patched: '2020-05-02T04:00:11.443Z' + - '@djanta/djantajs-compiler-rc > @djanta/djantajs-compiler-core > lodash': + patched: '2020-05-02T04:00:11.443Z' + - grunt > grunt-legacy-log > lodash: + patched: '2020-05-02T04:00:11.443Z' + - grunt > grunt-legacy-util > lodash: + patched: '2020-05-02T04:00:11.443Z' + - grunt-contrib-clean > async > lodash: + patched: '2020-05-02T04:00:11.443Z' + - grunt-contrib-jshint > jshint > lodash: + patched: '2020-05-02T04:00:11.443Z' + - grunt > grunt-legacy-log > grunt-legacy-log-utils > lodash: + patched: '2020-05-02T04:00:11.443Z' + - nyc > istanbul-lib-instrument > @babel/traverse > lodash: + patched: '2020-05-02T04:00:11.443Z' + - nyc > istanbul-lib-instrument > @babel/traverse > @babel/generator > lodash: + patched: '2020-05-02T04:00:11.443Z' + - nyc > istanbul-lib-instrument > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash: + patched: '2020-05-02T04:00:11.443Z' + - nyc > istanbul-lib-instrument > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash: + patched: '2020-05-02T04:00:11.443Z' + - grunt-contrib-nodeunit > nodeunit-x > tap > nyc > istanbul-lib-instrument > @babel/traverse > lodash: + patched: '2020-05-02T04:00:11.443Z' + - grunt-contrib-nodeunit > nodeunit-x > tap > nyc > istanbul-lib-instrument > @babel/traverse > @babel/generator > lodash: + patched: '2020-05-02T04:00:11.443Z' + - grunt-contrib-nodeunit > nodeunit-x > tap > nyc > istanbul-lib-instrument > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash: + patched: '2020-05-02T04:00:11.443Z' + - grunt-contrib-nodeunit > nodeunit-x > tap > nyc > istanbul-lib-instrument > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash: + patched: '2020-05-02T04:00:11.443Z'