From 46c70a1a06d03dbd9138327e03fb32c08531a637 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 26 Jan 2026 11:11:57 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-15053838 --- package-lock.json | 15 +++++++++++---- package.json | 2 +- 2 files changed, 12 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index ab025a6..d661ba4 100644 --- a/package-lock.json +++ b/package-lock.json @@ -27,7 +27,7 @@ "js-yaml": "^4.1.0", "json-2-csv": "^5.5.9", "kind-of": "^6.0.3", - "lodash": "^4.17.21", + "lodash": "^4.17.23", "mime-types": "^2.1.35", "minimatch": "^10.0.3", "ms": "^2.1.3", @@ -2549,6 +2549,13 @@ "node": ">= 12" } }, + "node_modules/commitizen/node_modules/lodash": { + "version": "4.17.21", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", + "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==", + "dev": true, + "license": "MIT" + }, "node_modules/commitizen/node_modules/minimist": { "version": "1.2.7", "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.7.tgz", @@ -7112,9 +7119,9 @@ } }, "node_modules/lodash": { - "version": "4.17.21", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", - "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==", + "version": "4.17.23", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz", + "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==", "license": "MIT" }, "node_modules/lodash.isplainobject": { diff --git a/package.json b/package.json index 7c8bd09..6ccd3a7 100644 --- a/package.json +++ b/package.json @@ -93,7 +93,7 @@ "js-yaml": "^4.1.0", "json-2-csv": "^5.5.9", "kind-of": "^6.0.3", - "lodash": "^4.17.21", + "lodash": "^4.17.23", "mime-types": "^2.1.35", "minimatch": "^10.0.3", "ms": "^2.1.3",