Skip to content

Commit

Permalink
fix(security): patch lodash.set dependency vulnerabilities (#1022)
Browse files Browse the repository at this point in the history
  • Loading branch information
arnaudbesnier authored Jan 26, 2024
1 parent 37c36e4 commit fc145d7
Show file tree
Hide file tree
Showing 2 changed files with 10 additions and 17 deletions.
4 changes: 2 additions & 2 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@
"cors": "2.8.5",
"csv-stringify": "1.0.4",
"express": "^4.18.2",
"express-jwt": "8.3.0",
"express-jwt": "8.4.1",
"forest-ip-utils": "1.0.1",
"http-errors": "1.7.3",
"inflected": "2.0.4",
Expand Down Expand Up @@ -93,7 +93,7 @@
"jest": "29.1.1",
"jest-extended": "3.1.0",
"lint-staged": "12.3.7",
"nock": "13.1.3",
"nock": "13.5.0",
"semantic-release": "19.0.3",
"semantic-release-npm-deprecate-old-versions": "1.3.2",
"semantic-release-slack-bot": "3.5.2",
Expand Down
23 changes: 8 additions & 15 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -4413,15 +4413,14 @@ expect@^29.3.1:
jest-message-util "^29.3.1"
jest-util "^29.3.1"

express-jwt@8.3.0:
version "8.3.0"
resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-8.3.0.tgz#fd317bb52bbe06bdd55afb8dad6bc65b44d39e14"
integrity sha512-3eMAlhv240YOzI0WRbufa2oBc6xR29GVY4HZ6AZfJQGnTtelXBmFRYPk+BojSdTa5JLlu9LVmOrTJRI9yg54ww==
express-jwt@8.4.1:
version "8.4.1"
resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-8.4.1.tgz#ba817c1ced7c6f1f7017fc2e6deac207011e8acb"
integrity sha512-IZoZiDv2yZJAb3QrbaSATVtTCYT11OcqgFGoTN4iKVyN6NBkBkhtVIixww5fmakF0Upt5HfOxJuS6ZmJVeOtTQ==
dependencies:
"@types/jsonwebtoken" "^9"
express-unless "^2.1.3"
jsonwebtoken "^9.0.0"
lodash.set "^4.3.2"

express-unless@^2.1.3:
version "2.1.3"
Expand Down Expand Up @@ -6588,11 +6587,6 @@ lodash.mergewith@^4.6.2:
resolved "https://registry.yarnpkg.com/lodash.mergewith/-/lodash.mergewith-4.6.2.tgz#617121f89ac55f59047c7aec1ccd6654c6590f55"
integrity sha512-GK3g5RPZWTRSeLSpgP8Xhra+pnjBC56q9FZYe1d5RN3TJ35dbkGy3YqBSMbyCrlbi+CM9Z3Jk5yTL7RCsqboyQ==

lodash.set@^4.3.2:
version "4.3.2"
resolved "https://registry.yarnpkg.com/lodash.set/-/lodash.set-4.3.2.tgz#d8757b1da807dde24816b0d6a84bea1a76230b23"
integrity sha1-2HV7HagH3eJIFrDWqEvqGnYjCyM=

lodash.snakecase@^4.1.1:
version "4.1.1"
resolved "https://registry.yarnpkg.com/lodash.snakecase/-/lodash.snakecase-4.1.1.tgz#39d714a35357147837aefd64b5dcbb16becd8f8d"
Expand Down Expand Up @@ -7189,14 +7183,13 @@ nise@^4.0.1:
just-extend "^4.0.2"
path-to-regexp "^1.7.0"

nock@13.1.3:
version "13.1.3"
resolved "https://registry.yarnpkg.com/nock/-/nock-13.1.3.tgz#110b005965654a8ffb798e87bad18b467bff15f9"
integrity sha512-YKj0rKQWMGiiIO+Y65Ut8OEgYM3PplLU2+GAhnPmqZdBd6z5IskgdBqWmjzA6lH3RF0S2a3wiAlrMOF5Iv2Jeg==
nock@13.5.0:
version "13.5.0"
resolved "https://registry.yarnpkg.com/nock/-/nock-13.5.0.tgz#82cd33b0dba6095d3f5a28d0ff2edac970fa05ec"
integrity sha512-9hc1eCS2HtOz+sE9W7JQw/tXJktg0zoPSu48s/pYe73e25JW9ywiowbqnUSd7iZPeVawLcVpPZeZS312fwSY+g==
dependencies:
debug "^4.1.0"
json-stringify-safe "^5.0.1"
lodash.set "^4.3.2"
propagate "^2.0.0"

node-emoji@^1.11.0:
Expand Down

0 comments on commit fc145d7

Please sign in to comment.