From a8afa411d0d96aa520b8fd886e7122b17fb3a230 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 16 Sep 2024 01:34:44 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-PATHTOREGEXP-7925106 --- package-lock.json | 9 +++++---- package.json | 2 +- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index 98f3cbb..676fe95 100644 --- a/package-lock.json +++ b/package-lock.json @@ -10,7 +10,7 @@ "license": "MIT", "dependencies": { "lodash": "^4.17.21", - "path-to-regexp": "^7.1.0" + "path-to-regexp": "^8.0.0" }, "devDependencies": { "codecov": "^3.8.3", @@ -6237,9 +6237,10 @@ "dev": true }, "node_modules/path-to-regexp": { - "version": "7.1.0", - "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-7.1.0.tgz", - "integrity": "sha512-ZToe+MbUF4lBqk6dV8GKot4DKfzrxXsplOddH8zN3YK+qw9/McvP7+4ICjZvOne0jQhN4eJwHsX6tT0Ns19fvw==", + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.0.0.tgz", + "integrity": "sha512-GAWaqWlTjYK/7SVpIUA6CTxmcg65SP30sbjdCvyYReosRkk7Z/LyHWwkK3Vu0FcIi0FNTADUs4eh1AsU5s10cg==", + "license": "MIT", "engines": { "node": ">=16" } diff --git a/package.json b/package.json index 8254d39..9a19661 100644 --- a/package.json +++ b/package.json @@ -7,7 +7,7 @@ "repository": "koajs/path-match", "dependencies": { "lodash": "^4.17.21", - "path-to-regexp": "^7.1.0" + "path-to-regexp": "^8.0.0" }, "devDependencies": { "codecov": "^3.8.3",