From 08c61ee77a8d917ed3e52d45f7f0ee5fbd6612db Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 29 Apr 2024 16:04:11 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-EJS-6689533 --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 51a4466928..aab2404b2b 100644 --- a/package-lock.json +++ b/package-lock.json @@ -15,7 +15,7 @@ "consolidate": "0.14.5", "dustjs-helpers": "1.5.0", "dustjs-linkedin": "2.5.0", - "ejs": "3.1.7", + "ejs": "^3.1.10", "ejs-locals": "1.0.2", "errorhandler": "1.4.3", "express": "4.17.3", @@ -2394,9 +2394,9 @@ "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==" }, "node_modules/ejs": { - "version": "3.1.7", - "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.7.tgz", - "integrity": "sha512-BIar7R6abbUxDA3bfXrO4DSgwo8I+fB5/1zgujl3HLLjwd6+9iOnrT+t3grn2qbk9vOgBubXOFwX2m9axoFaGw==", + "version": "3.1.10", + "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.10.tgz", + "integrity": "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==", "dependencies": { "jake": "^10.8.5" }, @@ -11508,9 +11508,9 @@ "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==" }, "ejs": { - "version": "3.1.7", - "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.7.tgz", - "integrity": "sha512-BIar7R6abbUxDA3bfXrO4DSgwo8I+fB5/1zgujl3HLLjwd6+9iOnrT+t3grn2qbk9vOgBubXOFwX2m9axoFaGw==", + "version": "3.1.10", + "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.10.tgz", + "integrity": "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==", "requires": { "jake": "^10.8.5" } diff --git a/package.json b/package.json index 03af543c3e..aa459de4d1 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,7 @@ "consolidate": "0.14.5", "dustjs-helpers": "1.5.0", "dustjs-linkedin": "2.5.0", - "ejs": "3.1.7", + "ejs": "3.1.10", "ejs-locals": "1.0.2", "errorhandler": "1.4.3", "express": "4.17.3",