From a5a596635f5fcc97aaa1dbe2b2f27a51a4ecce8f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 6 Sep 2021 03:44:18 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-1579269 --- package-lock.json | 21 ++++++++++----------- package.json | 2 +- 2 files changed, 11 insertions(+), 12 deletions(-) diff --git a/package-lock.json b/package-lock.json index 935d4211..500597f3 100644 --- a/package-lock.json +++ b/package-lock.json @@ -376,11 +376,11 @@ "dev": true }, "axios": { - "version": "0.15.3", - "resolved": "https://registry.npmjs.org/axios/-/axios-0.15.3.tgz", - "integrity": "sha1-LJ1jiy4ZGgjqHWzJiOrda6W9wFM=", + "version": "0.21.3", + "resolved": "https://registry.npmjs.org/axios/-/axios-0.21.3.tgz", + "integrity": "sha512-JtoZ3Ndke/+Iwt5n+BgSli/3idTvpt5OjKyoCmz4LX5+lPiY5l7C1colYezhlxThjNa/NhngCUWZSZFypIFuaA==", "requires": { - "follow-redirects": "1.0.0" + "follow-redirects": "^1.14.0" } }, "babel-code-frame": { @@ -3019,12 +3019,9 @@ } }, "follow-redirects": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.0.0.tgz", - "integrity": "sha1-jjQpjL0uF28lTv/sdaHHjMhJ/Tc=", - "requires": { - "debug": "2.6.9" - } + "version": "1.14.3", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.3.tgz", + "integrity": "sha512-3MkHxknWMUtb23apkgz/83fDoe+y+qr0TdgacGIA7bew+QLBo3vdgEN2xEsuXNivpFy4CyDhBBZnNZOtalmenw==" }, "for-in": { "version": "1.0.2", @@ -5471,6 +5468,7 @@ "version": "0.1.4", "bundled": true, "dev": true, + "optional": true, "requires": { "kind-of": "3.0.4", "longest": "1.0.1", @@ -6212,7 +6210,8 @@ "longest": { "version": "1.0.1", "bundled": true, - "dev": true + "dev": true, + "optional": true }, "loose-envify": { "version": "1.3.0", diff --git a/package.json b/package.json index 8bd7aee6..b2ff29db 100644 --- a/package.json +++ b/package.json @@ -52,7 +52,7 @@ "dist/*" ], "dependencies": { - "axios": "^0.15.2", + "axios": "^0.21.3", "debug": "^2.2.0", "js-base64": "^2.1.9", "utf8": "^2.1.1"