From f6af3bcf9f4e2210d3d264fa18c5b2d8481730a4 Mon Sep 17 00:00:00 2001 From: snyk-test Date: Thu, 4 Jul 2019 05:17:47 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- .snyk | 40 ++++++++++++++++++++++++++++++++++------ package.json | 2 +- 2 files changed, 35 insertions(+), 7 deletions(-) diff --git a/.snyk b/.snyk index 6205333..a1a4d02 100644 --- a/.snyk +++ b/.snyk @@ -1,16 +1,44 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.12.0 +version: v1.13.5 # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: 'npm:chownr:20180731': - bcrypt > node-pre-gyp > tar > chownr: expires: '2018-10-14T14:59:55.757Z' - '@google-cloud/datastore > google-gax > grpc > node-pre-gyp > tar > chownr': - reason: '' - expires: '2018-11-22T18:34:44.794Z' - '@google-cloud/datastore > google-gax > grpc > node-pre-gyp > tar > chownr': expires: '2018-10-14T14:59:55.757Z' - bcrypt > node-pre-gyp > tar > chownr: + - '@google-cloud/datastore > google-gax > grpc > node-pre-gyp > tar > chownr': + reason: '' + expires: '2018-11-22T18:34:44.794Z' + - bcrypt > node-pre-gyp > tar > chownr: reason: '' expires: '2018-11-22T18:34:44.794Z' -patch: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - snyk > @snyk/dep-graph > lodash: + patched: '2019-07-04T05:17:45.819Z' + - snyk > lodash: + patched: '2019-07-04T05:17:45.819Z' + - '@google-cloud/datastore > google-gax > lodash': + patched: '2019-07-04T05:17:45.819Z' + - snyk > snyk-nuget-plugin > lodash: + patched: '2019-07-04T05:17:45.819Z' + - snyk > snyk-nodejs-lockfile-parser > lodash: + patched: '2019-07-04T05:17:45.819Z' + - snyk > snyk-mvn-plugin > lodash: + patched: '2019-07-04T05:17:45.819Z' + - snyk > inquirer > lodash: + patched: '2019-07-04T05:17:45.819Z' + - snyk > snyk-config > lodash: + patched: '2019-07-04T05:17:45.819Z' + - '@google-cloud/datastore > google-gax > @grpc/grpc-js > lodash': + patched: '2019-07-04T05:17:45.819Z' + - snyk > snyk-nodejs-lockfile-parser > graphlib > lodash: + patched: '2019-07-04T05:17:45.819Z' + - snyk > snyk-go-plugin > graphlib > lodash: + patched: '2019-07-04T05:17:45.819Z' + - snyk > @snyk/dep-graph > graphlib > lodash: + patched: '2019-07-04T05:17:45.819Z' + - snyk > snyk-php-plugin > @snyk/composer-lockfile-parser > lodash: + patched: '2019-07-04T05:17:45.819Z' diff --git a/package.json b/package.json index 949951f..4f34080 100644 --- a/package.json +++ b/package.json @@ -26,7 +26,7 @@ "jsonwebtoken": "^8.1.0", "route-parser": "0.0.5", "slugify": "^1.2.6", - "snyk": "^1.69.10" + "snyk": "^1.189.0" }, "snyk": true }