diff --git a/.snyk b/.snyk index 8080ce9b22..4c78d59a7c 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.14.0 +version: v1.14.1 # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: SNYK-JS-AWESOMPLETE-174474: @@ -18,3 +18,5 @@ patch: SNYK-JS-LODASH-450202: - frappe-datatable > lodash: patched: '2020-01-31T01:33:09.889Z' + - snyk > snyk-nuget-plugin > dotnet-deps-parser > lodash: + patched: '2020-02-21T02:41:07.568Z' diff --git a/package.json b/package.json index 9ae9d7c31b..ed60201c85 100644 --- a/package.json +++ b/package.json @@ -46,7 +46,7 @@ "touch": "^3.1.0", "vue": "^2.6.8", "vue-router": "^2.0.0", - "snyk": "^1.288.0" + "snyk": "^1.294.1" }, "devDependencies": { "babel-runtime": "^6.26.0",