fix: package.json, yarn.lock & .snyk to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
This commit is contained in:
2020-11-26 07:17:47 +00:00
parent e863978a58
commit 4f8777b8fb
3 changed files with 37 additions and 3 deletions
+35 -1
View File
@@ -1,5 +1,5 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.15.0
version: v1.19.0
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
@@ -215,3 +215,37 @@ patch:
patched: '2020-05-01T01:01:38.423Z'
- nuxt > @nuxt/telemetry > inquirer > lodash:
patched: '2020-06-21T15:59:31.404Z'
- snyk > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > @snyk/snyk-cocoapods-plugin > @snyk/dep-graph > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > snyk-go-plugin > @snyk/dep-graph > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > snyk-cpp-plugin > @snyk/dep-graph > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > snyk-docker-plugin > @snyk/dep-graph > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > snyk-gradle-plugin > @snyk/java-call-graph-builder > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > snyk-docker-plugin > snyk-nodejs-lockfile-parser > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > snyk-mvn-plugin > @snyk/java-call-graph-builder > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > snyk-gradle-plugin > @snyk/cli-interface > @snyk/dep-graph > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > snyk-mvn-plugin > @snyk/cli-interface > @snyk/dep-graph > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > @snyk/snyk-cocoapods-plugin > @snyk/cocoapods-lockfile-parser > @snyk/dep-graph > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > snyk-php-plugin > @snyk/cli-interface > @snyk/dep-graph > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > snyk-python-plugin > snyk-poetry-lockfile-parser > @snyk/dep-graph > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > snyk-python-plugin > snyk-poetry-lockfile-parser > @snyk/cli-interface > @snyk/dep-graph > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > @snyk/dep-graph > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > snyk-nodejs-lockfile-parser > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'
- snyk > snyk-go-plugin > graphlib > lodash:
patched: '2020-11-26T07:00:40.521Z'