From e05171b55efa177b7eafa2013680495160536069 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 23 Feb 2021 03:56:56 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-1018905 - https://snyk.io/vuln/SNYK-JS-LODASH-1040724 --- package.json | 2 +- yarn.lock | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index b54c3c2..2818f00 100644 --- a/package.json +++ b/package.json @@ -46,6 +46,6 @@ "clipboard-js": "^0.3.6", "d3": "^4.4.4", "d3-scale-chromatic": "^1.3.0", - "lodash": "^4.17.10" + "lodash": "^4.17.21" } } diff --git a/yarn.lock b/yarn.lock index 85ac28e..4021792 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2936,6 +2936,11 @@ lodash@^4.17.10, lodash@^4.17.4, lodash@^4.3.0: version "4.17.10" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.10.tgz#1b7793cf7259ea38fb3661d4d38b3260af8ae4e7" +lodash@^4.17.21: + version "4.17.21" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c" + integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg== + log-driver@^1.2.5: version "1.2.7" resolved "https://registry.yarnpkg.com/log-driver/-/log-driver-1.2.7.tgz#63b95021f0702fedfa2c9bb0a24e7797d71871d8"