diff --git a/.snyk b/.snyk index c336f47..a782ec3 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.0 +version: v1.13.5 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -9,3 +9,30 @@ patch: 'npm:ws:20160104': - hypertimer > ws: patched: '2017-02-18T10:10:49.290Z' + SNYK-JS-LODASH-450202: + - mosca > amqp > lodash: + patched: '2019-07-06T22:03:26.388Z' + - snyk > lodash: + patched: '2019-07-06T22:03:26.388Z' + - snyk > snyk-nuget-plugin > lodash: + patched: '2019-07-06T22:03:26.388Z' + - snyk > snyk-nodejs-lockfile-parser > lodash: + patched: '2019-07-06T22:03:26.388Z' + - snyk > snyk-mvn-plugin > lodash: + patched: '2019-07-06T22:03:26.388Z' + - snyk > @snyk/dep-graph > lodash: + patched: '2019-07-06T22:03:26.388Z' + - snyk > inquirer > lodash: + patched: '2019-07-06T22:03:26.388Z' + - snyk > snyk-config > lodash: + patched: '2019-07-06T22:03:26.388Z' + - snyk > snyk-nodejs-lockfile-parser > graphlib > lodash: + patched: '2019-07-06T22:03:26.388Z' + - snyk > snyk-go-plugin > graphlib > lodash: + patched: '2019-07-06T22:03:26.388Z' + - snyk > @snyk/dep-graph > graphlib > lodash: + patched: '2019-07-06T22:03:26.388Z' + - snyk > snyk-php-plugin > @snyk/composer-lockfile-parser > lodash: + patched: '2019-07-06T22:03:26.388Z' + - mosca > ascoltatori > amqp > lodash: + patched: '2019-07-06T22:03:26.388Z' diff --git a/package.json b/package.json index 8f9a643..c5d348f 100644 --- a/package.json +++ b/package.json @@ -23,7 +23,7 @@ "hypertimer": "^2.1.3", "mosca": "^1.1.1", "winston": "^2.1.0", - "snyk": "^1.25.0" + "snyk": "^1.192.3" }, "preferGlobal": "true", "bugs": {