From e8e6cba7964b7e2634a1e3580754b35518d045cd Mon Sep 17 00:00:00 2001 From: snyk-test Date: Thu, 4 Jul 2019 02:36:56 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- .snyk | 28 ++++++++++++++++++++++++++-- package.json | 2 +- 2 files changed, 27 insertions(+), 3 deletions(-) diff --git a/.snyk b/.snyk index 7478646..cab55c0 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.8.0 +version: v1.13.5 # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: 'npm:mime:20170907': @@ -9,4 +9,28 @@ ignore: - express > serve-static > send > mime: reason: None given expires: '2018-01-03T22:45:12.780Z' -patch: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - snyk > snyk-nodejs-lockfile-parser > lodash: + patched: '2019-07-04T02:36:55.003Z' + - snyk > lodash: + patched: '2019-07-04T02:36:55.003Z' + - snyk > snyk-nuget-plugin > lodash: + patched: '2019-07-04T02:36:55.003Z' + - snyk > @snyk/dep-graph > lodash: + patched: '2019-07-04T02:36:55.003Z' + - snyk > inquirer > lodash: + patched: '2019-07-04T02:36:55.003Z' + - snyk > snyk-config > lodash: + patched: '2019-07-04T02:36:55.003Z' + - snyk > snyk-mvn-plugin > lodash: + patched: '2019-07-04T02:36:55.003Z' + - snyk > snyk-go-plugin > graphlib > lodash: + patched: '2019-07-04T02:36:55.003Z' + - snyk > snyk-nodejs-lockfile-parser > graphlib > lodash: + patched: '2019-07-04T02:36:55.003Z' + - snyk > snyk-php-plugin > @snyk/composer-lockfile-parser > lodash: + patched: '2019-07-04T02:36:55.003Z' + - snyk > @snyk/dep-graph > graphlib > lodash: + patched: '2019-07-04T02:36:55.003Z' diff --git a/package.json b/package.json index ea12ba0..ac34b40 100644 --- a/package.json +++ b/package.json @@ -15,7 +15,7 @@ "path": "^0.12.7", "socket.io": "", "validator": "^9.1.2", - "snyk": "^1.53.0" + "snyk": "^1.189.0" }, "snyk": true }