From 21ed076c87c2cbf5bc969bbec886f75120eca3d6 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 17 Aug 2020 08:22:25 +0000
Subject: [PATCH] fix: package.json & package-lock.json to reduce
vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-590103
---
package-lock.json | 6 +++---
package.json | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index 487bc14..036bb79 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1678,9 +1678,9 @@
}
},
"lodash": {
- "version": "4.17.15",
- "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
- "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A=="
+ "version": "4.17.20",
+ "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz",
+ "integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA=="
},
"lodash.flattendeep": {
"version": "4.4.0",
diff --git a/package.json b/package.json
index 645a0a4..525816b 100644
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
"async": "^3.1.0",
"big-integer": "^1.6.25",
"debug": "^3.1.0",
- "lodash": "^4.17.15",
+ "lodash": "^4.17.20",
"mongodb": "^3.0.11",
"safe-json-parse": "^4.0.0"
},