From f4ae257e2eddadfa0a333704ce98b24086ef8f4e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 3 May 2020 08:34:03 +0200 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 706996c..7bacc74 100644 --- a/package.json +++ b/package.json @@ -30,7 +30,7 @@ "yeoman-generator": "^2.0.5", "chalk": "^1.0.0", "yosay": "^1.0.0", - "snyk": "^1.88.2" + "snyk": "^1.316.2" }, "devDependencies": { "yeoman-assert": "^2.0.0", From 073c6c3907d2e0021730702153fa56074f400bef Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 3 May 2020 08:34:04 +0200 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 25 ++++++++++++++++++++++++- 1 file changed, 24 insertions(+), 1 deletion(-) diff --git a/.snyk b/.snyk index e460129..1f4f7a5 100644 --- a/.snyk +++ b/.snyk @@ -1,8 +1,31 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.12.0 +version: v1.14.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: 'npm:lodash:20180130': - yeoman-generator > html-wiring > cheerio > lodash: patched: '2018-07-08T08:02:41.863Z' + SNYK-JS-LODASH-567746: + - yeoman-generator > lodash: + patched: '2020-05-03T06:33:59.250Z' + - yeoman-generator > async > lodash: + patched: '2020-05-03T06:33:59.250Z' + - yeoman-generator > yeoman-environment > lodash: + patched: '2020-05-03T06:33:59.250Z' + - yeoman-generator > yeoman-environment > grouped-queue > lodash: + patched: '2020-05-03T06:33:59.250Z' + - yeoman-generator > yeoman-environment > inquirer > lodash: + patched: '2020-05-03T06:33:59.250Z' + - yeoman-generator > yeoman-environment > yeoman-generator > lodash: + patched: '2020-05-03T06:33:59.250Z' + - yeoman-generator > yeoman-environment > yeoman-generator > async > lodash: + patched: '2020-05-03T06:33:59.250Z' + - yeoman-generator > yeoman-environment > yeoman-generator > grouped-queue > lodash: + patched: '2020-05-03T06:33:59.250Z' + - yeoman-generator > yeoman-environment > yeoman-generator > yeoman-environment > lodash: + patched: '2020-05-03T06:33:59.250Z' + - yeoman-generator > yeoman-environment > yeoman-generator > yeoman-environment > grouped-queue > lodash: + patched: '2020-05-03T06:33:59.250Z' + - yeoman-generator > yeoman-environment > yeoman-generator > yeoman-environment > inquirer > lodash: + patched: '2020-05-03T06:33:59.250Z'