Skip to content

Commit

Permalink
fix(security): patch lodash.set dependency vulnerabilities (#1102)
Browse files Browse the repository at this point in the history
  • Loading branch information
arnaudbesnier authored Jan 26, 2024
1 parent 44ae933 commit 8f9ad0f
Show file tree
Hide file tree
Showing 2 changed files with 10 additions and 16 deletions.
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@
"@babel/runtime": "7.15.4",
"bluebird": "2.9.25",
"core-js": "3.6.5",
"forest-express": "10.2.11",
"forest-express": "10.2.12",
"http-errors": "1.6.1",
"lodash": "4.17.21",
"moment": "2.29.4",
Expand Down
24 changes: 9 additions & 15 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -4624,15 +4624,14 @@ expect@^26.6.2:
jest-message-util "^26.6.2"
jest-regex-util "^26.0.0"

express-jwt@8.3.0:
version "8.3.0"
resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-8.3.0.tgz#fd317bb52bbe06bdd55afb8dad6bc65b44d39e14"
integrity sha512-3eMAlhv240YOzI0WRbufa2oBc6xR29GVY4HZ6AZfJQGnTtelXBmFRYPk+BojSdTa5JLlu9LVmOrTJRI9yg54ww==
express-jwt@8.4.1:
version "8.4.1"
resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-8.4.1.tgz#ba817c1ced7c6f1f7017fc2e6deac207011e8acb"
integrity sha512-IZoZiDv2yZJAb3QrbaSATVtTCYT11OcqgFGoTN4iKVyN6NBkBkhtVIixww5fmakF0Upt5HfOxJuS6ZmJVeOtTQ==
dependencies:
"@types/jsonwebtoken" "^9"
express-unless "^2.1.3"
jsonwebtoken "^9.0.0"
lodash.set "^4.3.2"

express-unless@^2.1.3:
version "2.1.3"
Expand Down Expand Up @@ -4900,10 +4899,10 @@ for-in@^1.0.2:
resolved "https://registry.yarnpkg.com/for-in/-/for-in-1.0.2.tgz#81068d295a8142ec0ac726c6e2200c30fb6d5e80"
integrity sha512-7EwmXrOjyL+ChxMhmG5lnW9MPt1aIeZEwKhQzoBUdTV0N3zuwWDZYVJatDvZ2OyzPUvdIAZDsCetk3coyMfcnQ==

[email protected].11:
version "10.2.11"
resolved "https://registry.yarnpkg.com/forest-express/-/forest-express-10.2.11.tgz#b6a8bad91fd5dccde0db140002dce3e4b19eb5e6"
integrity sha512-uaPJX/hyWNl3/udvdUcwJKDijccqie1aqkmAdxGs0tLmzdl967i1WjrCMEOJtypLBWfwoFo47UsktrD/SAKs6w==
[email protected].12:
version "10.2.12"
resolved "https://registry.yarnpkg.com/forest-express/-/forest-express-10.2.12.tgz#0eb4a285f7c001b15cb7cc46bf3390b5c921824b"
integrity sha512-2bAsr31b4qULRrFELVjyF3Qx0ITDD/56sW4KU67cgdbM0KEZq6J7EQejMYa/bPQdFlybRtmp7wh1iAKWizQi7w==
dependencies:
"@babel/runtime" "7.19.0"
"@forestadmin/context" "1.31.0"
Expand All @@ -4916,7 +4915,7 @@ [email protected]:
cors "2.8.5"
csv-stringify "1.0.4"
express "^4.18.2"
express-jwt "8.3.0"
express-jwt "8.4.1"
forest-ip-utils "1.0.1"
http-errors "1.7.3"
inflected "2.0.4"
Expand Down Expand Up @@ -7123,11 +7122,6 @@ lodash.mergewith@^4.6.2:
resolved "https://registry.yarnpkg.com/lodash.mergewith/-/lodash.mergewith-4.6.2.tgz#617121f89ac55f59047c7aec1ccd6654c6590f55"
integrity sha512-GK3g5RPZWTRSeLSpgP8Xhra+pnjBC56q9FZYe1d5RN3TJ35dbkGy3YqBSMbyCrlbi+CM9Z3Jk5yTL7RCsqboyQ==

lodash.set@^4.3.2:
version "4.3.2"
resolved "https://registry.yarnpkg.com/lodash.set/-/lodash.set-4.3.2.tgz#d8757b1da807dde24816b0d6a84bea1a76230b23"
integrity sha512-4hNPN5jlm/N/HLMCO43v8BXKq9Z7QdAGc/VGrRD61w8gN9g/6jF9A4L1pbUgBLCffi0w9VsXfTOij5x8iTyFvg==

lodash.snakecase@^4.1.1:
version "4.1.1"
resolved "https://registry.yarnpkg.com/lodash.snakecase/-/lodash.snakecase-4.1.1.tgz#39d714a35357147837aefd64b5dcbb16becd8f8d"
Expand Down

0 comments on commit 8f9ad0f

Please sign in to comment.