From d2db577946700378c441f1c7e673197cb8863a2b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 1 Nov 2023 07:33:20 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6032459 --- package-lock.json | 18 ++++++++++++------ package.json | 2 +- 2 files changed, 13 insertions(+), 7 deletions(-) diff --git a/package-lock.json b/package-lock.json index dc7ff78..af1d7e0 100644 --- a/package-lock.json +++ b/package-lock.json @@ -12,7 +12,7 @@ "@stoplight/spectral-core": "^1.12.3", "@stoplight/spectral-ruleset-bundler": "^1.3.0", "@stoplight/spectral-runtime": "^1.1.2", - "axios": "^0.27.2", + "axios": "^1.6.0", "chalk": "^4.1.2", "tmp": "^0.2.1", "yargs": "^17.5.1" @@ -1646,12 +1646,13 @@ } }, "node_modules/axios": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/axios/-/axios-0.27.2.tgz", - "integrity": "sha512-t+yRIyySRTp/wua5xEr+z1q60QmLq8ABsS5O9Me1AsE5dfKqgnCFzwiCZZ/cGNd1lq4/7akDWMxdhVlucjmnOQ==", + "version": "1.6.0", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.0.tgz", + "integrity": "sha512-EZ1DYihju9pwVB+jg67ogm+Tmqc6JmhamRN6I4Zt8DfZu5lbcQGw3ozH9lFejSJgs/ibaef3A9PMXPLeefFGJg==", "dependencies": { - "follow-redirects": "^1.14.9", - "form-data": "^4.0.0" + "follow-redirects": "^1.15.0", + "form-data": "^4.0.0", + "proxy-from-env": "^1.1.0" } }, "node_modules/babel-jest": { @@ -4190,6 +4191,11 @@ "node": ">= 6" } }, + "node_modules/proxy-from-env": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz", + "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==" + }, "node_modules/punycode": { "version": "2.2.0", "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.2.0.tgz", diff --git a/package.json b/package.json index 7fae8e1..38be1c3 100644 --- a/package.json +++ b/package.json @@ -33,7 +33,7 @@ "@stoplight/spectral-core": "^1.12.3", "@stoplight/spectral-ruleset-bundler": "^1.3.0", "@stoplight/spectral-runtime": "^1.1.2", - "axios": "^0.27.2", + "axios": "^1.6.0", "chalk": "^4.1.2", "tmp": "^0.2.1", "yargs": "^17.5.1"