From 4cf3d527a519dee1b620e4d9734dc08f7665f89c Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 16 Aug 2020 23:51:51 +0000 Subject: [PATCH] fix: interface/src/package.json & interface/src/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-590103 --- interface/src/package.json | 2 +- interface/src/yarn.lock | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/interface/src/package.json b/interface/src/package.json index fc7a92fc..7ce1417d 100644 --- a/interface/src/package.json +++ b/interface/src/package.json @@ -60,7 +60,7 @@ "copy-webpack-plugin": "^4.5.1", "history": "^4.7.2", "immutability-helper": "^2.6.6", - "lodash": "^4.17.5", + "lodash": "^4.17.20", "material-ui": "^1.0.0-beta.39", "material-ui-icons": "^1.0.0-beta.36", "moment": "^2.21.0", diff --git a/interface/src/yarn.lock b/interface/src/yarn.lock index da07c2f7..54bb4260 100644 --- a/interface/src/yarn.lock +++ b/interface/src/yarn.lock @@ -4071,6 +4071,11 @@ lodash@^4.0.0, lodash@^4.14.0, lodash@^4.17.2, lodash@^4.17.4, lodash@^4.17.5, l version "4.17.5" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.5.tgz#99a92d65c0272debe8c96b6057bc8fbfa3bed511" +lodash@^4.17.20: + version "4.17.20" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.20.tgz#b44a9b6297bcb698f1c51a3545a2b3b368d59c52" + integrity sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA== + loglevel@^1.4.1: version "1.6.1" resolved "https://registry.yarnpkg.com/loglevel/-/loglevel-1.6.1.tgz#e0fc95133b6ef276cdc8887cdaf24aa6f156f8fa"