From 418fe6461b92de09aa4e53fdc05809453896a412 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 23 Dec 2022 09:44:39 +0000 Subject: [PATCH] fix: packages/cli/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-JSONWEBTOKEN-3180020 - https://snyk.io/vuln/SNYK-JS-JSONWEBTOKEN-3180022 - https://snyk.io/vuln/SNYK-JS-JSONWEBTOKEN-3180024 - https://snyk.io/vuln/SNYK-JS-JSONWEBTOKEN-3180026 --- packages/cli/package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/cli/package.json b/packages/cli/package.json index ae187cb90b16a..bc8060d4a4a6b 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -138,8 +138,8 @@ "ioredis": "^4.28.5", "json-diff": "^0.5.4", "jsonschema": "^1.4.1", - "jsonwebtoken": "^8.5.1", - "jwks-rsa": "~1.12.1", + "jsonwebtoken": "^9.0.0", + "jwks-rsa": "~2.0.0", "localtunnel": "^2.0.0", "lodash.get": "^4.4.2", "lodash.intersection": "^4.4.0",