From ed85809464460513ff3c75be422884ce88cef709 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 15 Apr 2024 16:42:23 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-6139239 --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 43a02c3..65a8ede 100644 --- a/package.json +++ b/package.json @@ -14,6 +14,6 @@ "typescript": "^4.9.4" }, "dependencies": { - "lodash": "4.17.11" + "lodash": "4.17.17" } } diff --git a/yarn.lock b/yarn.lock index c1783e4..43043af 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1725,10 +1725,10 @@ lodash.memoize@4.x: resolved "https://packages.atlassian.com/api/npm/npm-remote/lodash.memoize/-/lodash.memoize-4.1.2.tgz#bcc6c49a42a2840ed997f323eada5ecd182e0bfe" integrity sha512-t7j+NzmgnQzTAYXcsHYLgimltOV1MXHtlOWf6GjL9Kj8GK5FInw5JotxvbOs+IvV1/Dzo04/fCGfLVs7aXb4Ag== -lodash@4.17.11: - version "4.17.11" - resolved "https://packages.atlassian.com/api/npm/npm-remote/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d" - integrity sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg== +lodash@4.17.17: + version "4.17.17" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.17.tgz#d9018b3acc57a95c9dcf4a45c6b63b877b6c2d45" + integrity sha512-/B2DjOphAoqi5BX4Gg2oh4UR0Gy/A7xYAMh3aSECEKzwS3eCDEpS0Cals1Ktvxwlal3bBJNc+5W9kNIcADdw5Q== lru-cache@^5.1.1: version "5.1.1"