From a9c5742a6f28ef3f98fcc41ca2356fa7bfb9da76 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 17 Aug 2020 02:14:16 +0000 Subject: [PATCH] fix: javascript/package.json & javascript/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-590103 --- javascript/package.json | 2 +- javascript/yarn.lock | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/javascript/package.json b/javascript/package.json index 469f4e2..3793d91 100644 --- a/javascript/package.json +++ b/javascript/package.json @@ -24,7 +24,7 @@ "bootstrap": "3.4.1", "es-symbol": "^1.1.2", "jquery": "^3.3.1", - "lodash": "^4.17.10", + "lodash": "^4.17.20", "moment": "^2.22.1", "query-string": "^6.1.0", "react": "^16.4.0", diff --git a/javascript/yarn.lock b/javascript/yarn.lock index 693d4ba..5b83085 100644 --- a/javascript/yarn.lock +++ b/javascript/yarn.lock @@ -4080,6 +4080,11 @@ lodash@^4.0.0, lodash@^4.13.1, lodash@^4.17.10, lodash@^4.17.2, lodash@^4.17.4, version "4.17.10" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.10.tgz#1b7793cf7259ea38fb3661d4d38b3260af8ae4e7" +lodash@^4.17.20: + version "4.17.20" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.20.tgz#b44a9b6297bcb698f1c51a3545a2b3b368d59c52" + integrity sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA== + log-symbols@^1.0.2: version "1.0.2" resolved "https://registry.yarnpkg.com/log-symbols/-/log-symbols-1.0.2.tgz#376ff7b58ea3086a0f09facc74617eca501e1a18"