From d782bcafbead095869ebd95e53b13ab9c5df276c Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 12 Sep 2020 02:26:12 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NODEFETCH-674311 --- package.json | 2 +- yarn.lock | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index a7d2d722..b1dd5ed0 100644 --- a/package.json +++ b/package.json @@ -73,7 +73,7 @@ "ngx-childprocess": "^0.0.6", "ngx-device-detector": "^1.4.5", "ngx-electron": "^2.1.1", - "node-fetch": "^2.6.0", + "node-fetch": "^2.6.1", "notosans-fontface": "1.1.0", "rxjs": "^6.5.5", "rxjs-compat": "^6.5.5", diff --git a/yarn.lock b/yarn.lock index 7fb8697b..c2b1d4d6 100644 --- a/yarn.lock +++ b/yarn.lock @@ -8426,6 +8426,11 @@ node-fetch@^2.6.0: resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.0.tgz#e633456386d4aa55863f676a7ab0daa8fdecb0fd" integrity sha512-8dG4H5ujfvFiqDmVu9fQ5bOHUC15JMjMY/Zumv26oOvvVJjM67KF8koCWIabKQ1GJIa9r2mMZscBq/TbdOcmNA== +node-fetch@^2.6.1: + version "2.6.1" + resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.1.tgz#045bd323631f76ed2e2b55573394416b639a0052" + integrity sha512-V4aYg89jEoVRxRb2fJdAg8FHvI7cEyYdVAh94HH0UIK8oJxUfkjlDQN9RbMx+bEjP7+ggMiFRprSti032Oipxw== + node-forge@0.9.0: version "0.9.0" resolved "https://registry.yarnpkg.com/node-forge/-/node-forge-0.9.0.tgz#d624050edbb44874adca12bb9a52ec63cb782579"