diff --git a/.snyk b/.snyk index b6f58f2..c8927c8 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.1 +version: v1.13.5 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -10,3 +10,26 @@ patch: patched: '2017-05-25T02:53:03.264Z' - socket.io > socket.io-adapter > debug > ms: patched: '2017-05-25T02:53:03.264Z' + SNYK-JS-LODASH-450202: + - snyk > snyk-nodejs-lockfile-parser > lodash: + patched: '2019-07-04T01:46:56.470Z' + - snyk > lodash: + patched: '2019-07-04T01:46:56.470Z' + - snyk > snyk-nuget-plugin > lodash: + patched: '2019-07-04T01:46:56.470Z' + - snyk > @snyk/dep-graph > lodash: + patched: '2019-07-04T01:46:56.470Z' + - snyk > inquirer > lodash: + patched: '2019-07-04T01:46:56.470Z' + - snyk > snyk-config > lodash: + patched: '2019-07-04T01:46:56.470Z' + - snyk > snyk-mvn-plugin > lodash: + patched: '2019-07-04T01:46:56.470Z' + - snyk > snyk-go-plugin > graphlib > lodash: + patched: '2019-07-04T01:46:56.470Z' + - snyk > snyk-nodejs-lockfile-parser > graphlib > lodash: + patched: '2019-07-04T01:46:56.470Z' + - snyk > snyk-php-plugin > @snyk/composer-lockfile-parser > lodash: + patched: '2019-07-04T01:46:56.470Z' + - snyk > @snyk/dep-graph > graphlib > lodash: + patched: '2019-07-04T01:46:56.470Z' diff --git a/package.json b/package.json index f3ef443..2992f00 100644 --- a/package.json +++ b/package.json @@ -14,7 +14,7 @@ "mvc": "npenin/node-mvc", "socket.io": "latest", "socket.io-client": "latest", - "snyk": "^1.30.1" + "snyk": "^1.189.0" }, "scripts": { "snyk-protect": "snyk protect",