From 8310bbd453ef2349be54d77f52ac5b718872bc8f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 10 Jul 2020 02:15:15 +0000 Subject: [PATCH] fix: javascript/package.json & javascript/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- javascript/package.json | 2 +- javascript/yarn.lock | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/javascript/package.json b/javascript/package.json index 469f4e2..c05528c 100644 --- a/javascript/package.json +++ b/javascript/package.json @@ -24,7 +24,7 @@ "bootstrap": "3.4.1", "es-symbol": "^1.1.2", "jquery": "^3.3.1", - "lodash": "^4.17.10", + "lodash": "^4.17.16", "moment": "^2.22.1", "query-string": "^6.1.0", "react": "^16.4.0", diff --git a/javascript/yarn.lock b/javascript/yarn.lock index 693d4ba..64dd380 100644 --- a/javascript/yarn.lock +++ b/javascript/yarn.lock @@ -4080,6 +4080,11 @@ lodash@^4.0.0, lodash@^4.13.1, lodash@^4.17.10, lodash@^4.17.2, lodash@^4.17.4, version "4.17.10" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.10.tgz#1b7793cf7259ea38fb3661d4d38b3260af8ae4e7" +lodash@^4.17.16: + version "4.17.19" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b" + integrity sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ== + log-symbols@^1.0.2: version "1.0.2" resolved "https://registry.yarnpkg.com/log-symbols/-/log-symbols-1.0.2.tgz#376ff7b58ea3086a0f09facc74617eca501e1a18"