Skip to content
This repository has been archived by the owner on Dec 10, 2024. It is now read-only.

Commit

Permalink
fix: package.json & yarn.lock to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-EXPRESS-6474509
  • Loading branch information
snyk-bot committed Mar 27, 2024
1 parent b1b828d commit 9884a6d
Show file tree
Hide file tree
Showing 2 changed files with 82 additions and 4 deletions.
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@
"electron-store": "^8.1.0",
"electron-updater": "^5.3.0",
"electron-window-state": "^5.0.3",
"express": "^4.18.2",
"express": "^4.19.2",
"get-port": "5.1.1",
"jimp": "^0.22.8",
"lastfmapi": "^0.1.1",
Expand Down
84 changes: 81 additions & 3 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -3624,6 +3624,26 @@ __metadata:
languageName: node
linkType: hard

"body-parser@npm:1.20.2":
version: 1.20.2
resolution: "body-parser@npm:1.20.2"
dependencies:
bytes: 3.1.2
content-type: ~1.0.5
debug: 2.6.9
depd: 2.0.0
destroy: 1.2.0
http-errors: 2.0.0
iconv-lite: 0.4.24
on-finished: 2.4.1
qs: 6.11.0
raw-body: 2.5.2
type-is: ~1.6.18
unpipe: 1.0.0
checksum: 14d37ec638ab5c93f6099ecaed7f28f890d222c650c69306872e00b9efa081ff6c596cd9afb9930656aae4d6c4e1c17537bea12bb73c87a217cb3cfea8896737
languageName: node
linkType: hard

"bonjour@npm:^3.5.0":
version: 3.5.0
resolution: "bonjour@npm:3.5.0"
Expand Down Expand Up @@ -4163,7 +4183,7 @@ __metadata:
electron-updater: ^5.3.0
electron-webpack: ^2.8.2
electron-window-state: ^5.0.3
express: ^4.18.2
express: ^4.19.2
get-port: 5.1.1
jimp: ^0.22.8
lastfmapi: ^0.1.1
Expand Down Expand Up @@ -4504,7 +4524,7 @@ __metadata:
languageName: node
linkType: hard

"content-type@npm:^1.0.4, content-type@npm:~1.0.4":
"content-type@npm:^1.0.4, content-type@npm:~1.0.4, content-type@npm:~1.0.5":
version: 1.0.5
resolution: "content-type@npm:1.0.5"
checksum: 566271e0a251642254cde0f845f9dd4f9856e52d988f4eb0d0dcffbb7a1f8ec98de7a5215fc628f3bce30fe2fb6fd2bc064b562d721658c59b544e2d34ea2766
Expand Down Expand Up @@ -4532,6 +4552,13 @@ __metadata:
languageName: node
linkType: hard

"cookie@npm:0.6.0":
version: 0.6.0
resolution: "cookie@npm:0.6.0"
checksum: f56a7d32a07db5458e79c726b77e3c2eff655c36792f2b6c58d351fb5f61531e5b1ab7f46987150136e366c65213cbe31729e02a3eaed630c3bf7334635fb410
languageName: node
linkType: hard

"cookie@npm:^0.4.1":
version: 0.4.2
resolution: "cookie@npm:0.4.2"
Expand Down Expand Up @@ -5915,7 +5942,7 @@ __metadata:
languageName: node
linkType: hard

"express@npm:^4.17.1, express@npm:^4.18.2":
"express@npm:^4.17.1":
version: 4.18.2
resolution: "express@npm:4.18.2"
dependencies:
Expand Down Expand Up @@ -5954,6 +5981,45 @@ __metadata:
languageName: node
linkType: hard

"express@npm:^4.19.2":
version: 4.19.2
resolution: "express@npm:4.19.2"
dependencies:
accepts: ~1.3.8
array-flatten: 1.1.1
body-parser: 1.20.2
content-disposition: 0.5.4
content-type: ~1.0.4
cookie: 0.6.0
cookie-signature: 1.0.6
debug: 2.6.9
depd: 2.0.0
encodeurl: ~1.0.2
escape-html: ~1.0.3
etag: ~1.8.1
finalhandler: 1.2.0
fresh: 0.5.2
http-errors: 2.0.0
merge-descriptors: 1.0.1
methods: ~1.1.2
on-finished: 2.4.1
parseurl: ~1.3.3
path-to-regexp: 0.1.7
proxy-addr: ~2.0.7
qs: 6.11.0
range-parser: ~1.2.1
safe-buffer: 5.2.1
send: 0.18.0
serve-static: 1.15.0
setprototypeof: 1.2.0
statuses: 2.0.1
type-is: ~1.6.18
utils-merge: 1.0.1
vary: ~1.1.2
checksum: 212dbd6c2c222a96a61bc927639c95970a53b06257080bb9e2838adb3bffdb966856551fdad1ab5dd654a217c35db94f987d0aa88d48fb04d306340f5f34dca5
languageName: node
linkType: hard

"extend-shallow@npm:^2.0.1":
version: 2.0.1
resolution: "extend-shallow@npm:2.0.1"
Expand Down Expand Up @@ -10474,6 +10540,18 @@ __metadata:
languageName: node
linkType: hard

"raw-body@npm:2.5.2":
version: 2.5.2
resolution: "raw-body@npm:2.5.2"
dependencies:
bytes: 3.1.2
http-errors: 2.0.0
iconv-lite: 0.4.24
unpipe: 1.0.0
checksum: ba1583c8d8a48e8fbb7a873fdbb2df66ea4ff83775421bfe21ee120140949ab048200668c47d9ae3880012f6e217052690628cf679ddfbd82c9fc9358d574676
languageName: node
linkType: hard

"rc@npm:^1.2.7":
version: 1.2.8
resolution: "rc@npm:1.2.8"
Expand Down

0 comments on commit 9884a6d

Please sign in to comment.