diff --git a/.snyk b/.snyk index 9801e10d..61fa0da2 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.13.5 +version: v1.14.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -78,3 +78,20 @@ patch: patched: '2019-10-03T22:41:48.298Z' - nodemailer-mailgun-transport > mailgun-js > proxy-agent > pac-proxy-agent > https-proxy-agent: patched: '2019-10-03T22:41:48.298Z' + SNYK-JS-LODASH-567746: + - lodash: + patched: '2020-04-30T22:43:51.024Z' + - async > lodash: + patched: '2020-04-30T22:43:51.024Z' + - winston-graylog2 > lodash: + patched: '2020-04-30T22:43:51.024Z' + - winston > async > lodash: + patched: '2020-04-30T22:43:51.024Z' + - nodemailer-mailgun-transport > mailgun-js > async > lodash: + patched: '2020-04-30T22:43:51.024Z' + - node-sass > gaze > globule > lodash: + patched: '2020-04-30T22:43:51.024Z' + - node-sass > sass-graph > lodash: + patched: '2020-04-30T22:43:51.024Z' + - nodemailer-html-to-text > html-to-text > lodash: + patched: '2020-04-30T22:43:51.024Z' diff --git a/package.json b/package.json index 1c146c36..a9f24a1e 100644 --- a/package.json +++ b/package.json @@ -22,7 +22,7 @@ "snyk-protect": "snyk protect", "typings": "typings install", "prepublish": "npm run snyk-protect", - "prepare": "npm run snyk-protect" + "prepare": "yarn run snyk-protect" }, "repository": { "type": "git", @@ -103,7 +103,7 @@ "require-webpack-compat": "3.0.0", "serve-favicon": "2.5.0", "slug": "0.9.2", - "snyk": "^1.230.5", + "snyk": "^1.316.1", "socket.io": "2.1.1", "socket.io-client": "2.1.1", "uuid-token-generator": "1.0.0",