From cb49946c3a8f92e10c98fb6bd59c33256891751c Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 8 Jul 2022 08:30:30 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MOMENT-2944238 --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index e675b6c..1fe236f 100644 --- a/package.json +++ b/package.json @@ -26,7 +26,7 @@ "es6-promise": "4.0.5", "express": "4.16.0", "helmet": "3.21.1", - "moment": "2.19.3", + "moment": "2.29.4", "nedb": "1.8.0", "request": "2.82.0", "snyk": "^1.518.0" diff --git a/yarn.lock b/yarn.lock index b557533..d4c6e4a 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3622,10 +3622,10 @@ mkdirp@^1.0.3, mkdirp@^1.0.4: resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-1.0.4.tgz#3eb5ed62622756d79a5f0e2a221dfebad75c2f7e" integrity sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw== -moment@2.19.3: - version "2.19.3" - resolved "https://registry.yarnpkg.com/moment/-/moment-2.19.3.tgz#bdb99d270d6d7fda78cc0fbace855e27fe7da69f" - integrity sha1-vbmdJw1tf9p4zA+6zoVeJ/59pp8= +moment@2.29.4: + version "2.29.4" + resolved "https://registry.yarnpkg.com/moment/-/moment-2.29.4.tgz#3dbe052889fe7c1b2ed966fcb3a77328964ef108" + integrity sha512-5LC9SOxjSc2HF6vO2CyuTDNivEdoz2IvyJJGj6X8DJ0eFyfszE0QiEd+iXmBvUP3WHxSjFH/vIsA0EN00cgr8w== ms@2.0.0: version "2.0.0"