From 3ec8e4e0ce98044921e189282c3eb929cf6b2ffb Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 5 Oct 2019 01:41:51 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131 --- .snyk | 7 ++++++- package.json | 2 +- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index 8fdeecc..538973c 100644 --- a/.snyk +++ b/.snyk @@ -1,8 +1,13 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.1 +version: v1.13.5 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: 'npm:uglify-js:20151024': - jade > transformers > uglify-js: patched: '2017-06-14T09:12:58.067Z' + SNYK-JS-HTTPSPROXYAGENT-469131: + - snyk > proxy-agent > https-proxy-agent: + patched: '2019-10-05T01:41:49.702Z' + - snyk > proxy-agent > pac-proxy-agent > https-proxy-agent: + patched: '2019-10-05T01:41:49.702Z' diff --git a/package.json b/package.json index 4cff652..d648573 100644 --- a/package.json +++ b/package.json @@ -34,7 +34,7 @@ "morgan": "~1.9.0", "serve-favicon": "~2.4.3", "stylus": "~0.54.3", - "snyk": "^1.34.3" + "snyk": "^1.231.0" }, "devDependencies": { "debug": "~2.6.9",