From f66cc9792cc17b801c1e463a94c727c3c8e5c973 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 5 Dec 2022 09:02:37 +0000
Subject: [PATCH] fix: src/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-QS-3153490
---
 src/package.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/package.json b/src/package.json
index ca86258f5b4..7da8de2cef1 100644
--- a/src/package.json
+++ b/src/package.json
@@ -13,12 +13,12 @@
                      ],
   "dependencies"   : {
                       "etherpad-yajsml"         : "0.0.2",
-                      "request"                 : "2.55.0",
+                      "request"                 : "2.73.0",
                       "etherpad-require-kernel" : "1.0.9",
                       "resolve"                 : "1.1.7",
                       "socket.io"               : "1.6.0",
                       "ueberdb2"                : "0.3.0",
-                      "express"                 : "4.13.4",
+                      "express"                 : "4.17.3",
                       "express-session"         : "1.13.0",
                       "cookie-parser"           : "1.3.4",
                       "async"                   : "0.9.0",
@@ -43,7 +43,7 @@
                       "jsonminify"              : "0.4.1",
                       "measured"                : "1.1.0",
                       "mocha"                   : "2.4.5",
-                      "supertest"               : "1.2.0"
+                      "supertest"               : "2.0.0"
                      },
   "bin":             { "etherpad-lite": "./node/server.js" },
   "devDependencies": {