From 1422bae23384406c8ae8aad54ec69bca48e1c90f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 28 Aug 2020 03:56:56 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-608086 --- package.json | 2 +- yarn.lock | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index b54c3c2..c022a5b 100644 --- a/package.json +++ b/package.json @@ -46,6 +46,6 @@ "clipboard-js": "^0.3.6", "d3": "^4.4.4", "d3-scale-chromatic": "^1.3.0", - "lodash": "^4.17.10" + "lodash": "^4.17.17" } } diff --git a/yarn.lock b/yarn.lock index 85ac28e..3a5ecf2 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2936,6 +2936,11 @@ lodash@^4.17.10, lodash@^4.17.4, lodash@^4.3.0: version "4.17.10" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.10.tgz#1b7793cf7259ea38fb3661d4d38b3260af8ae4e7" +lodash@^4.17.17: + version "4.17.20" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.20.tgz#b44a9b6297bcb698f1c51a3545a2b3b368d59c52" + integrity sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA== + log-driver@^1.2.5: version "1.2.7" resolved "https://registry.yarnpkg.com/log-driver/-/log-driver-1.2.7.tgz#63b95021f0702fedfa2c9bb0a24e7797d71871d8"