From 7db8f752c59e89ddd67ecb3f938d591dede2c7c1 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 8 Dec 2018 03:59:04 +0000 Subject: [PATCH 1/3] fix: seasoned_api/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:base64url:20180511 - https://snyk.io/vuln/npm:cryptiles:20180710 - https://snyk.io/vuln/npm:extend:20180424 - https://snyk.io/vuln/npm:stringstream:20180511 --- seasoned_api/package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/seasoned_api/package.json b/seasoned_api/package.json index 2001433..fd1f102 100644 --- a/seasoned_api/package.json +++ b/seasoned_api/package.json @@ -18,12 +18,12 @@ "body-parser": "~1.18.2", "cross-env": "~5.1.4", "express": "~4.16.0", - "jsonwebtoken": "^8.0.1", + "jsonwebtoken": "^8.2.0", "mongoose": "~5.0.11", "km-moviedb": "^0.2.12", "node-cache": "^4.1.1", "python-shell": "^0.5.0", - "request": "^2.85.0", + "request": "^2.87.0", "request-promise": "^4.2", "sqlite3": "^4.0.0" }, From 4eaa60b0445d22e977cafeab12b6e7d95c0294f7 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 13 Dec 2018 03:19:03 +0000 Subject: [PATCH 2/3] fix: seasoned_api/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MPATH-72672 --- seasoned_api/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/seasoned_api/package.json b/seasoned_api/package.json index 2001433..a1e7f03 100644 --- a/seasoned_api/package.json +++ b/seasoned_api/package.json @@ -19,7 +19,7 @@ "cross-env": "~5.1.4", "express": "~4.16.0", "jsonwebtoken": "^8.0.1", - "mongoose": "~5.0.11", + "mongoose": "~5.2.12", "km-moviedb": "^0.2.12", "node-cache": "^4.1.1", "python-shell": "^0.5.0", From 53228a2662ee898b204d79bfa6afd54f91fc5a58 Mon Sep 17 00:00:00 2001 From: snyk-test Date: Fri, 26 Jul 2019 23:56:40 +0000 Subject: [PATCH 3/3] fix: client/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-JSYAML-173999 - https://snyk.io/vuln/SNYK-JS-JSYAML-174129 --- client/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/client/package.json b/client/package.json index 3529ce3..10fca34 100644 --- a/client/package.json +++ b/client/package.json @@ -12,7 +12,7 @@ }, "dependencies": { "clean-webpack-plugin": "^0.1.17", - "css-loader": "^0.28.4", + "css-loader": "^1.0.0", "html-webpack-plugin": "^2.28.0", "path": "^0.12.7", "react": "^15.6.1",