Skip to content

Commit

Permalink
fix: package.json, package-lock.json & .snyk to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MONGOOSE-8446504
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-534988
- https://snyk.io/vuln/npm:marked:20150520
- https://snyk.io/vuln/SNYK-JS-JSONSCHEMA-1920922
- https://snyk.io/vuln/SNYK-JS-BODYPARSER-7926860
- https://snyk.io/vuln/SNYK-JS-JSYAML-174129
- https://snyk.io/vuln/npm:ejs:20161128
- https://snyk.io/vuln/SNYK-JS-ACORN-559469
- https://snyk.io/vuln/SNYK-JS-EXPRESSFILEUPLOAD-473997
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-480388
- https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728
- https://snyk.io/vuln/SNYK-JS-MINIMATCH-1019388
- https://snyk.io/vuln/SNYK-JS-MOMENT-2440688
- https://snyk.io/vuln/SNYK-JS-MONGODB-473855
- https://snyk.io/vuln/SNYK-JS-SNYKGRADLEPLUGIN-8248487
- https://snyk.io/vuln/SNYK-JS-SNYKPHPPLUGIN-8248485
- https://snyk.io/vuln/npm:fresh:20170908
- https://snyk.io/vuln/npm:marked:20170112
- https://snyk.io/vuln/npm:marked:20170815
- https://snyk.io/vuln/npm:marked:20170907
- https://snyk.io/vuln/npm:minimatch:20160620
- https://snyk.io/vuln/npm:negotiator:20160616
- https://snyk.io/vuln/npm:qs:20170213
- https://snyk.io/vuln/SNYK-JS-ADMZIP-1065796
- https://snyk.io/vuln/SNYK-JS-HAWK-2808852
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-173692
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-174183
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-469063
- https://snyk.io/vuln/SNYK-JS-COOKIE-8163060
- https://snyk.io/vuln/SNYK-JS-JSZIP-3188562
- https://snyk.io/vuln/npm:brace-expansion:20170302
- https://snyk.io/vuln/SNYK-JS-MARKED-584281
- https://snyk.io/vuln/SNYK-JS-EXPRESS-6474509
- https://snyk.io/vuln/SNYK-JS-JSYAML-173999
- https://snyk.io/vuln/SNYK-JS-MONGOOSE-472486
- https://snyk.io/vuln/npm:ejs:20161130
- https://snyk.io/vuln/npm:ejs:20161130-1
- https://snyk.io/vuln/npm:moment:20161019
- https://snyk.io/vuln/SNYK-JS-SNYK-3111871
- https://snyk.io/vuln/SNYK-JS-GOT-2932019
- https://snyk.io/vuln/npm:jquery:20150627
- https://snyk.io/vuln/SNYK-JS-MARKED-174116
- https://snyk.io/vuln/SNYK-JS-MARKED-451540
- https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818
- https://snyk.io/vuln/SNYK-JS-UGLIFYJS-1727251
- https://snyk.io/vuln/npm:ms:20151024
- https://snyk.io/vuln/SNYK-JS-EXPRESS-7926867
- https://snyk.io/vuln/npm:request:20160119
- https://snyk.io/vuln/npm:marked:20170815-1
- https://snyk.io/vuln/npm:hawk:20160119
- https://snyk.io/vuln/npm:mime:20170907
- https://snyk.io/vuln/npm:moment:20170905
- https://snyk.io/vuln/npm:ms:20170412
- https://snyk.io/vuln/npm:cli:20160615
- https://snyk.io/vuln/SNYK-JS-SEND-7926862
- https://snyk.io/vuln/SNYK-JS-SERVESTATIC-7926865


The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/npm:minimatch:20160620
  • Loading branch information
snyk-bot committed Dec 20, 2024
1 parent 491a5f1 commit 45df5ff
Show file tree
Hide file tree
Showing 3 changed files with 6,398 additions and 6,743 deletions.
15 changes: 14 additions & 1 deletion .snyk
Original file line number Diff line number Diff line change
@@ -1,8 +1,21 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.14.0
version: v1.25.1
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
'npm:http-signature:20150122':
- tap > codecov.io > request > http-signature:
patched: '2020-02-07T14:30:00.093Z'
'npm:minimatch:20160620':
- dustjs-linkedin > cli > glob > minimatch:
patched: '2024-12-20T03:18:19.108Z'
id: 'npm:minimatch:20160620'
path: dustjs-linkedin > cli > glob > minimatch
- tap > nyc > istanbul > fileset > minimatch:
patched: '2024-12-20T03:18:19.108Z'
id: 'npm:minimatch:20160620'
path: tap > nyc > istanbul > fileset > minimatch
- tap > nyc > istanbul > fileset > glob > minimatch:
patched: '2024-12-20T03:18:19.108Z'
id: 'npm:minimatch:20160620'
path: tap > nyc > istanbul > fileset > glob > minimatch
Loading

0 comments on commit 45df5ff

Please sign in to comment.