diff --git a/.snyk b/.snyk index c336f47..a0186af 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.0 +version: v1.7.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -9,3 +9,24 @@ patch: 'npm:ws:20160104': - hypertimer > ws: patched: '2017-02-18T10:10:49.290Z' + 'npm:ms:20170412': + - hypertimer > debug > ms: + patched: '2017-05-27T02:17:18.942Z' + - csWeb > socket.io > socket.io-parser > debug > ms: + patched: '2017-05-27T02:17:18.942Z' + - csWeb > socket.io > socket.io-adapter > socket.io-parser > debug > ms: + patched: '2017-05-27T02:17:18.942Z' + - csWeb > socket.io > socket.io-client > socket.io-parser > debug > ms: + patched: '2017-05-27T02:17:18.942Z' + - hypertimer > body-parser > debug > ms: + patched: '2017-05-27T02:17:18.942Z' + - csWeb > socket.io > debug > ms: + patched: '2017-05-27T02:17:18.942Z' + - csWeb > socket.io > engine.io > debug > ms: + patched: '2017-05-27T02:17:18.942Z' + - csWeb > socket.io > socket.io-adapter > debug > ms: + patched: '2017-05-27T02:17:18.942Z' + - csWeb > socket.io > socket.io-client > debug > ms: + patched: '2017-05-27T02:17:18.942Z' + - csWeb > socket.io > socket.io-client > engine.io-client > debug > ms: + patched: '2017-05-27T02:17:18.942Z' diff --git a/package.json b/package.json index 8f9a643..5f63b29 100644 --- a/package.json +++ b/package.json @@ -21,9 +21,9 @@ "dependencies": { "csweb": "git://github.com/TNOCS/csWeb.git#7d9befbc04c236572c2a2b80753575d03d402797", "hypertimer": "^2.1.3", - "mosca": "^1.1.1", + "mosca": "^2.5.1", "winston": "^2.1.0", - "snyk": "^1.25.0" + "snyk": "^1.31.0" }, "preferGlobal": "true", "bugs": {