From 5611bb7c44ec3d4a44823b167c1b96dd69f76c23 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 30 Sep 2017 07:24:11 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:debug:20170905 Latest report for tnocs/csweb-sim: https://snyk.io/test/github/tnocs/csweb-sim --- .snyk | 27 ++++++++++++++++++++++++++- package.json | 2 +- 2 files changed, 27 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index 260973d..9cd864f 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.0 +version: v1.7.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -11,3 +11,28 @@ patch: patched: '2017-02-18T10:10:46.080Z' - csweb > hypertimer > ws: patched: '2017-02-18T10:10:46.080Z' + 'npm:debug:20170905': + - csweb > hypertimer > body-parser > debug: + patched: '2017-09-30T07:24:11.290Z' + - hypertimer > debug: + patched: '2017-09-30T07:24:11.290Z' + - csweb > socket.io > socket.io-parser > debug: + patched: '2017-09-30T07:24:11.290Z' + - csweb > socket.io > socket.io-adapter > socket.io-parser > debug: + patched: '2017-09-30T07:24:11.290Z' + - csweb > socket.io > socket.io-client > socket.io-parser > debug: + patched: '2017-09-30T07:24:11.290Z' + - hypertimer > body-parser > debug: + patched: '2017-09-30T07:24:11.290Z' + - csweb > hypertimer > debug: + patched: '2017-09-30T07:24:11.290Z' + - csweb > socket.io > debug: + patched: '2017-09-30T07:24:11.290Z' + - csweb > socket.io > engine.io > debug: + patched: '2017-09-30T07:24:11.290Z' + - csweb > socket.io > socket.io-adapter > debug: + patched: '2017-09-30T07:24:11.290Z' + - csweb > socket.io > socket.io-client > debug: + patched: '2017-09-30T07:24:11.290Z' + - csweb > socket.io > socket.io-client > engine.io-client > debug: + patched: '2017-09-30T07:24:11.290Z' diff --git a/package.json b/package.json index d57a086..f92ad2a 100644 --- a/package.json +++ b/package.json @@ -28,7 +28,7 @@ "mosca": "^2.1.0", "setprototypeof": "^1.0.1", "winston": "^2.1.0", - "snyk": "^1.25.0" + "snyk": "^1.41.1" }, "devDependencies": { "chokidar": "^1.2.0",