diff --git a/.snyk b/.snyk index a51a58c..8e0d0e2 100644 --- a/.snyk +++ b/.snyk @@ -1,8 +1,35 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.8.0 +version: v1.13.5 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: 'npm:moment:20170905': - twilio > moment: patched: '2017-12-01T08:45:09.983Z' + SNYK-JS-LODASH-450202: + - snyk > snyk-nodejs-lockfile-parser > lodash: + patched: '2019-07-04T01:15:00.735Z' + - twilio > lodash: + patched: '2019-07-04T01:15:00.735Z' + - mailgun-js > async > lodash: + patched: '2019-07-04T01:15:00.735Z' + - snyk > snyk-nuget-plugin > lodash: + patched: '2019-07-04T01:15:00.735Z' + - snyk > @snyk/dep-graph > lodash: + patched: '2019-07-04T01:15:00.735Z' + - snyk > inquirer > lodash: + patched: '2019-07-04T01:15:00.735Z' + - snyk > lodash: + patched: '2019-07-04T01:15:00.735Z' + - snyk > snyk-mvn-plugin > lodash: + patched: '2019-07-04T01:15:00.735Z' + - snyk > snyk-config > lodash: + patched: '2019-07-04T01:15:00.735Z' + - snyk > @snyk/dep-graph > graphlib > lodash: + patched: '2019-07-04T01:15:00.735Z' + - snyk > snyk-nodejs-lockfile-parser > graphlib > lodash: + patched: '2019-07-04T01:15:00.735Z' + - snyk > snyk-php-plugin > @snyk/composer-lockfile-parser > lodash: + patched: '2019-07-04T01:15:00.735Z' + - snyk > snyk-go-plugin > graphlib > lodash: + patched: '2019-07-04T01:15:00.735Z' diff --git a/package.json b/package.json index caeb801..1663363 100644 --- a/package.json +++ b/package.json @@ -13,7 +13,7 @@ "dependencies": { "mailgun-js": "^0.11.3", "twilio": "^3.5.0", - "snyk": "^1.52.1" + "snyk": "^1.189.0" }, "devDependencies": { "babelify": "^7.3.0",