fix: package.json, package-lock.json & .snyk to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746
basics · Dec 2, 2020 · ac0df51 · ac0df51
1 parent 7245db1
commit ac0df51
Show file tree

Hide file tree

Showing 3 changed files with 130 additions and 30 deletions.
diff --git a/.snyk b/.snyk
@@ -137,3 +137,37 @@ patch:
         patched: '2020-09-08T14:22:47.642Z'
     - snyk > snyk-docker-plugin > snyk-nodejs-lockfile-parser > graphlib > lodash:
         patched: '2020-09-12T18:42:31.509Z'
+    - snyk > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > @snyk/dep-graph > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > snyk-nodejs-lockfile-parser > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > snyk-go-plugin > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > @snyk/snyk-cocoapods-plugin > @snyk/dep-graph > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > snyk-cpp-plugin > @snyk/dep-graph > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > snyk-docker-plugin > @snyk/dep-graph > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > snyk-go-plugin > @snyk/dep-graph > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > snyk-gradle-plugin > @snyk/java-call-graph-builder > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > snyk-mvn-plugin > @snyk/java-call-graph-builder > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > @snyk/snyk-cocoapods-plugin > @snyk/cocoapods-lockfile-parser > @snyk/dep-graph > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > snyk-php-plugin > @snyk/cli-interface > @snyk/dep-graph > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > snyk-python-plugin > @snyk/cli-interface > @snyk/dep-graph > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > snyk-gradle-plugin > @snyk/cli-interface > @snyk/dep-graph > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > snyk-mvn-plugin > @snyk/cli-interface > @snyk/dep-graph > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > snyk-python-plugin > snyk-poetry-lockfile-parser > @snyk/dep-graph > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
+    - snyk > snyk-python-plugin > snyk-poetry-lockfile-parser > @snyk/cli-interface > @snyk/dep-graph > graphlib > lodash:
+        patched: '2020-11-27T14:41:06.740Z'
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -65,6 +65,6 @@
   },
   "snyk": true,
   "dependencies": {
-    "snyk": "^1.425.4"
+    "snyk": "^1.431.2"
   }
 }