From 8335d39aa43b5f64279fb19f4dfd42412b53d7c9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 9 Jan 2022 23:09:32 +0000 Subject: [PATCH] fix: plugins/push/package.json & plugins/push/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NODEFORGE-2331908 - https://snyk.io/vuln/SNYK-JS-NODEFORGE-2331910 --- plugins/push/package-lock.json | 6 +++--- plugins/push/package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/plugins/push/package-lock.json b/plugins/push/package-lock.json index ba6a4a96aeb..c6214f2f478 100644 --- a/plugins/push/package-lock.json +++ b/plugins/push/package-lock.json @@ -93,9 +93,9 @@ "integrity": "sha512-tgp+dl5cGk28utYktBsrFqA7HKgrhgPsg6Z/EfhWI4gl1Hwq8B/GmY/0oXZ6nF8hDVesS/FpnYaD/kOWhYQvyg==" }, "node-forge": { - "version": "0.7.6", - "resolved": "https://registry.npmjs.org/node-forge/-/node-forge-0.7.6.tgz", - "integrity": "sha512-sol30LUpz1jQFBjOKwbjxijiE3b6pjd74YwfD0fJOKPjF+fONKb2Yg8rYgS6+bK6VDl+/wfr4IYpC7jDzLUIfw==" + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/node-forge/-/node-forge-1.0.0.tgz", + "integrity": "sha512-ShkiiAlzSsgH1IwGlA0jybk9vQTIOLyJ9nBd0JTuP+nzADJFLY0NoDijM2zvD/JaezooGu3G2p2FNxOAK6459g==" }, "safe-buffer": { "version": "5.1.2", diff --git a/plugins/push/package.json b/plugins/push/package.json index 2b6ab1b3f46..486285bce15 100644 --- a/plugins/push/package.json +++ b/plugins/push/package.json @@ -24,7 +24,7 @@ ], "dependencies": { "jsonwebtoken": "^8.0.1", - "node-forge": "0.7.6" + "node-forge": "1.0.0" }, "private": true }