From 746153155de07da5086e617d10ee1d8f0533d12e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 17 Dec 2019 03:15:58 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:adm-zip:20180415 - https://snyk.io/vuln/npm:marked:20150520 --- package-lock.json | 12 ++++++------ package.json | 4 ++-- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 47f5ec03a7..c8a5b9edba 100644 --- a/package-lock.json +++ b/package-lock.json @@ -78,9 +78,9 @@ "dev": true }, "adm-zip": { - "version": "0.4.7", - "resolved": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.4.7.tgz", - "integrity": "sha1-hgbCy/HEJs6MjsABdER/1Jtur8E=" + "version": "0.4.11", + "resolved": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.4.11.tgz", + "integrity": "sha512-L8vcjDTCOIJk7wFvmlEUN7AsSb8T+2JrdP7KINBjzr24TJ5Mwj590sLu3BC7zNZowvJWa/JtPmD8eJCzdtDWjA==" }, "ansi-regex": { "version": "2.1.1", @@ -2094,9 +2094,9 @@ "integrity": "sha1-s632s9hW6VTiw5DmzvIggSRaU9Y=" }, "marked": { - "version": "0.3.5", - "resolved": "https://registry.npmjs.org/marked/-/marked-0.3.5.tgz", - "integrity": "sha1-QROhWsXXvKFYpargciRYe5+hW5Q=" + "version": "0.3.6", + "resolved": "https://registry.npmjs.org/marked/-/marked-0.3.6.tgz", + "integrity": "sha1-ssbGGPzOzk74bE/Gy4p8v1rtqNc=" }, "md5.js": { "version": "1.3.5", diff --git a/package.json b/package.json index a63eeb5e30..f5e1cf1998 100644 --- a/package.json +++ b/package.json @@ -17,7 +17,7 @@ }, "dependencies": { "@snyk/nodejs-runtime-agent": "^1.31.0", - "adm-zip": "0.4.7", + "adm-zip": "0.4.11", "body-parser": "1.9.0", "cfenv": "^1.0.4", "consolidate": "0.14.5", @@ -33,7 +33,7 @@ "humanize-ms": "1.0.1", "jquery": "^2.2.4", "lodash": "4.17.4", - "marked": "0.3.5", + "marked": "0.3.6", "method-override": "latest", "moment": "2.15.1", "mongoose": "4.2.4",