From 9b86d482ecaa4c2acf278e75f5bfafed0ab1a58f Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 7 Jun 2022 21:09:50 +0000
Subject: [PATCH] fix: upgrade underscore from 1.9.1 to 1.13.3

Snyk has created this PR to upgrade underscore from 1.9.1 to 1.13.3.

See this package in npm:
https://www.npmjs.com/package/underscore

See this project in Snyk:
https://app.snyk.io/org/poc-0xf/project/b34213d8-b2ca-4c1d-93cd-bd62892d870a?utm_source=github&utm_medium=referral&page=upgrade-pr
---
 package-lock.json | 32 +++++++++++++++++++++-----------
 package.json      |  2 +-
 2 files changed, 22 insertions(+), 12 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 1282962..ec32c24 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3498,9 +3498,9 @@
       },
       "dependencies": {
         "lodash": {
-          "version": "4.17.20",
-          "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz",
-          "integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA==",
+          "version": "4.17.21",
+          "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+          "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
           "dev": true
         }
       }
@@ -6822,7 +6822,8 @@
                   "version": "1.1.0",
                   "resolved": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz",
                   "integrity": "sha1-PXz0Rk22RG6mRL9LOVB/mFEAjo4=",
-                  "dev": true
+                  "dev": true,
+                  "optional": true
                 },
                 "gauge": {
                   "version": "2.6.0",
@@ -6868,6 +6869,7 @@
                       "resolved": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz",
                       "integrity": "sha1-EYvfW4zcUaKn5w0hHgfisLmxB9M=",
                       "dev": true,
+                      "optional": true,
                       "requires": {
                         "code-point-at": "^1.0.0",
                         "is-fullwidth-code-point": "^1.0.0",
@@ -6879,6 +6881,7 @@
                           "resolved": "https://registry.npmjs.org/code-point-at/-/code-point-at-1.0.0.tgz",
                           "integrity": "sha1-9psZLT99keOC5Lcb3bd4eGGasMY=",
                           "dev": true,
+                          "optional": true,
                           "requires": {
                             "number-is-nan": "^1.0.0"
                           },
@@ -6887,7 +6890,8 @@
                               "version": "1.0.0",
                               "resolved": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.0.tgz",
                               "integrity": "sha1-wCD1KcUoKt/dIz2R1LGBw9aG3Es=",
-                              "dev": true
+                              "dev": true,
+                              "optional": true
                             }
                           }
                         },
@@ -6896,6 +6900,7 @@
                           "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz",
                           "integrity": "sha1-754xOG8DGn8NZDr4L95QxFfvAMs=",
                           "dev": true,
+                          "optional": true,
                           "requires": {
                             "number-is-nan": "^1.0.0"
                           },
@@ -6904,7 +6909,8 @@
                               "version": "1.0.0",
                               "resolved": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.0.tgz",
                               "integrity": "sha1-wCD1KcUoKt/dIz2R1LGBw9aG3Es=",
-                              "dev": true
+                              "dev": true,
+                              "optional": true
                             }
                           }
                         }
@@ -8193,6 +8199,7 @@
           "resolved": "https://registry.npmjs.org/align-text/-/align-text-0.1.4.tgz",
           "integrity": "sha1-DNkKVhCT810KmSVsIrcGlDP60Rc=",
           "dev": true,
+          "optional": true,
           "requires": {
             "kind-of": "^3.0.2",
             "longest": "^1.0.1",
@@ -9066,7 +9073,8 @@
           "version": "1.0.1",
           "resolved": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz",
           "integrity": "sha1-MKCy2jj3N3DoKUoNIuZiXtd9AJc=",
-          "dev": true
+          "dev": true,
+          "optional": true
         },
         "loose-envify": {
           "version": "1.2.0",
@@ -11726,9 +11734,9 @@
       }
     },
     "underscore": {
-      "version": "1.9.1",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.9.1.tgz",
-      "integrity": "sha1-BtzjSg5op7q8KbNluOdLiSUgOWE="
+      "version": "1.13.3",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.3.tgz",
+      "integrity": "sha512-QvjkYpiD+dJJraRA8+dGAU4i7aBbb2s0S3jA45TFOvg2VgqvdCDd/3N6CqA8gluk1W91GLoXg5enMUx560QzuA=="
     },
     "underscore.string": {
       "version": "3.3.5",
@@ -12323,6 +12331,7 @@
           "resolved": "https://registry.npmjs.org/boom/-/boom-0.4.2.tgz",
           "integrity": "sha1-emNune1O/O+xnO9JR6PGffrukRs=",
           "dev": true,
+          "optional": true,
           "requires": {
             "hoek": "0.9.x"
           }
@@ -12389,7 +12398,8 @@
           "version": "0.9.1",
           "resolved": "https://registry.npmjs.org/hoek/-/hoek-0.9.1.tgz",
           "integrity": "sha1-PTIkYrrfB3Fup+uFuviAec3c5QU=",
-          "dev": true
+          "dev": true,
+          "optional": true
         },
         "http-signature": {
           "version": "0.10.1",
diff --git a/package.json b/package.json
index c5b8642..6d0a1aa 100644
--- a/package.json
+++ b/package.json
@@ -20,7 +20,7 @@
     "node-esapi": "0.0.1",
     "serve-favicon": "^2.3.0",
     "swig": "^1.4.2",
-    "underscore": "^1.8.3"
+    "underscore": "^1.13.3"
   },
   "comments": {
     "//": "a9 insecure components"