From 742fcd25b8543a493df24ac8d0a60d6daad3a3d8 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 30 Apr 2020 17:55:05 -0400 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index e0dc1e6..8039a4f 100644 --- a/package.json +++ b/package.json @@ -11,7 +11,7 @@ "dotenv-extended": "^2.0.1", "restify": "^5.0.0", "schema-inspector": "^1.6.8", - "snyk": "^1.83.0" + "snyk": "^1.316.1" }, "devDependencies": { "request": "^2.81.0", From 91760eb8458d8f39421ab786b96e04fdee846139 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 30 Apr 2020 17:55:06 -0400 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/.snyk b/.snyk index 0a74b6e..c965123 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.12.0 +version: v1.14.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -20,3 +20,16 @@ patch: patched: '2018-06-21T06:49:26.836Z' - botbuilder-location > botbuilder > jsonwebtoken > joi > topo > hoek: patched: '2018-06-21T06:49:26.836Z' + SNYK-JS-LODASH-567746: + - botbuilder-cognitiveservices > lodash: + patched: '2020-04-30T21:54:26.847Z' + - restify > lodash: + patched: '2020-04-30T21:54:26.847Z' + - restify > restify-errors > lodash: + patched: '2020-04-30T21:54:26.847Z' + - botbuilder-location > request-promise > request-promise-core > lodash: + patched: '2020-04-30T21:54:26.847Z' + - botbuilder > botframework-connector > adal-node > async > lodash: + patched: '2020-04-30T21:54:26.847Z' + - botbuilder-azure > botbuilder > botframework-connector > adal-node > async > lodash: + patched: '2020-04-30T21:54:26.847Z'