From bbdfa608dd31a39f76e30e51d14d73903a1326c6 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 5 Dec 2022 00:06:34 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-QS-3153490 --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 41213a1c0..27a19dc76 100644 --- a/package.json +++ b/package.json @@ -13,7 +13,7 @@ "acorn": "2.5.2", "async": "^0.9.0", "base64id": "~0.1.0", - "connect": "~2.12.0", + "connect": "~3.0.0", "debug": "~0.7.4", "ejs": "~1.0.0", "emmet": "git+https://github.com/cloud9ide/emmet-core.git#2ff6dc06ad", @@ -28,7 +28,7 @@ "nak": "git+https://github.com/cloud9ide/nak.git#6deef931594", "netutil": "~0.0.2", "optimist": "~0.6.0", - "qs": "0.6.6", + "qs": "6.2.4", "rusha": "^0.8.3", "send": "~0.1.4", "simple-mime": "~0.0.8",