fix: .snyk & package.json to reduce vulnerabilities
The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202
This commit is contained in:
parent
2b2794d675
commit
42660d084b
2 changed files with 4 additions and 2 deletions
4
.snyk
4
.snyk
|
|
@ -1,5 +1,5 @@
|
|||
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
|
||||
version: v1.14.0
|
||||
version: v1.14.1
|
||||
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
|
||||
ignore:
|
||||
SNYK-JS-AWESOMPLETE-174474:
|
||||
|
|
@ -18,3 +18,5 @@ patch:
|
|||
SNYK-JS-LODASH-450202:
|
||||
- frappe-datatable > lodash:
|
||||
patched: '2020-01-31T01:33:09.889Z'
|
||||
- snyk > snyk-nuget-plugin > dotnet-deps-parser > lodash:
|
||||
patched: '2020-02-21T02:41:07.568Z'
|
||||
|
|
|
|||
|
|
@ -46,7 +46,7 @@
|
|||
"touch": "^3.1.0",
|
||||
"vue": "^2.6.8",
|
||||
"vue-router": "^2.0.0",
|
||||
"snyk": "^1.288.0"
|
||||
"snyk": "^1.294.1"
|
||||
},
|
||||
"devDependencies": {
|
||||
"babel-runtime": "^6.26.0",
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue