From 3973178a6c2881cb33f41cd6c1c43f77615d1b79 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 5 Jan 2024 14:49:21 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6144788 --- package-lock.json | 26 ++++++++------------------ package.json | 2 +- 2 files changed, 9 insertions(+), 19 deletions(-) diff --git a/package-lock.json b/package-lock.json index 8ca8b1d..841a199 100644 --- a/package-lock.json +++ b/package-lock.json @@ -13,7 +13,7 @@ "@govtechsg/document-store": "^2.2.3", "@govtechsg/open-attestation": "^6.2.0", "@govtechsg/token-registry": "^4.1.7", - "axios": "^1.6.2", + "axios": "^1.6.4", "debug": "^4.3.1", "did-resolver": "^3.1.0", "ethers": "^5.1.4", @@ -2291,16 +2291,6 @@ "runtypes": "^6.3.0" } }, - "node_modules/@govtechsg/dnsprove/node_modules/axios": { - "version": "1.6.1", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.1.tgz", - "integrity": "sha512-vfBmhDpKafglh0EldBEbVuoe7DyAavGSLWhuSm5ZSEKQnHhBf0xAAwybbNH1IkrJNGnS/VG4I5yxig1pCEXE4g==", - "dependencies": { - "follow-redirects": "^1.15.0", - "form-data": "^4.0.0", - "proxy-from-env": "^1.1.0" - } - }, "node_modules/@govtechsg/document-store": { "version": "2.2.3", "resolved": "https://registry.npmjs.org/@govtechsg/document-store/-/document-store-2.2.3.tgz", @@ -5540,11 +5530,11 @@ } }, "node_modules/axios": { - "version": "1.6.2", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.2.tgz", - "integrity": "sha512-7i24Ri4pmDRfJTR7LDBhsOTtcm+9kjX5WiY1X3wIisx6G9So3pfMkEiU7emUBe46oceVImccTEM3k6C5dbVW8A==", + "version": "1.6.4", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.4.tgz", + "integrity": "sha512-heJnIs6N4aa1eSthhN9M5ioILu8Wi8vmQW9iHQ9NUvfkJb0lEEDUiIdQNAuBtfUt3FxReaKdpQA5DbmMOqzF/A==", "dependencies": { - "follow-redirects": "^1.15.0", + "follow-redirects": "^1.15.4", "form-data": "^4.0.0", "proxy-from-env": "^1.1.0" } @@ -9303,9 +9293,9 @@ "dev": true }, "node_modules/follow-redirects": { - "version": "1.15.3", - "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.3.tgz", - "integrity": "sha512-1VzOtuEM8pC9SFU1E+8KfTjZyMztRsgEfwQl44z8A25uy13jSzTj6dyK2Df52iV0vgHCfBwLhDWevLn95w5v6Q==", + "version": "1.15.4", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.4.tgz", + "integrity": "sha512-Cr4D/5wlrb0z9dgERpUL3LrmPKVDsETIJhaCMeDfuFYcqa5bldGV6wBsAN6X/vxlXQtFBMrXdXxdL8CbDTGniw==", "funding": [ { "type": "individual", diff --git a/package.json b/package.json index 7d39ce6..27c4966 100644 --- a/package.json +++ b/package.json @@ -29,7 +29,7 @@ "@govtechsg/document-store": "^2.2.3", "@govtechsg/open-attestation": "^6.2.0", "@govtechsg/token-registry": "^4.1.7", - "axios": "^1.6.2", + "axios": "^1.6.4", "debug": "^4.3.1", "did-resolver": "^3.1.0", "ethers": "^5.1.4",