From 9d93266fc3298d75fb985cda4dc7ef6c79718ddf Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 25 Apr 2023 07:19:42 +0000 Subject: [PATCH] fix: server/package.json & server/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-YAML-5458867 --- server/package-lock.json | 16 ++++++++-------- server/package.json | 2 +- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/server/package-lock.json b/server/package-lock.json index 063762b..c2c32fc 100644 --- a/server/package-lock.json +++ b/server/package-lock.json @@ -12,7 +12,7 @@ "glob": "^7.1.6", "vscode-languageserver": "^8.0.2", "vscode-languageserver-textdocument": "^1.0.1", - "yaml": "^1.10.2" + "yaml": "^2.2.2" }, "devDependencies": { "@types/glob": "^7.1.3", @@ -2617,11 +2617,11 @@ } }, "node_modules/yaml": { - "version": "1.10.2", - "resolved": "https://registry.npmjs.org/yaml/-/yaml-1.10.2.tgz", - "integrity": "sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==", + "version": "2.2.2", + "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.2.2.tgz", + "integrity": "sha512-CBKFWExMn46Foo4cldiChEzn7S7SRV+wqiluAb6xmueD/fGyRHIhX8m14vVGgeFWjN540nKCNVj6P21eQjgTuA==", "engines": { - "node": ">= 6" + "node": ">= 14" } }, "node_modules/yargs": { @@ -4703,9 +4703,9 @@ "dev": true }, "yaml": { - "version": "1.10.2", - "resolved": "https://registry.npmjs.org/yaml/-/yaml-1.10.2.tgz", - "integrity": "sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==" + "version": "2.2.2", + "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.2.2.tgz", + "integrity": "sha512-CBKFWExMn46Foo4cldiChEzn7S7SRV+wqiluAb6xmueD/fGyRHIhX8m14vVGgeFWjN540nKCNVj6P21eQjgTuA==" }, "yargs": { "version": "16.2.0", diff --git a/server/package.json b/server/package.json index c2a33f7..b26f73e 100644 --- a/server/package.json +++ b/server/package.json @@ -15,7 +15,7 @@ "glob": "^7.1.6", "vscode-languageserver": "^8.0.2", "vscode-languageserver-textdocument": "^1.0.1", - "yaml": "^1.10.2" + "yaml": "^2.2.2" }, "devDependencies": { "@types/glob": "^7.1.3",