From 1184ae3b7863257e329575446acc90480325e33a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 9 Apr 2023 16:15:24 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-XML2JS-5414874 --- package-lock.json | 6 +++--- package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index 20985be..a385994 100644 --- a/package-lock.json +++ b/package-lock.json @@ -5476,9 +5476,9 @@ "dev": true }, "xml2js": { - "version": "0.4.23", - "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.23.tgz", - "integrity": "sha512-ySPiMjM0+pLDftHgXY4By0uswI3SPKLDw/i3UXbnO8M/p28zqexCUoPmQFrYD+/1BzhGJSs2i1ERWKJAtiLrug==", + "version": "0.5.0", + "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.5.0.tgz", + "integrity": "sha512-drPFnkQJik/O+uPKpqSgr22mpuFHqKdbS835iAQrUC73L2F5WkboIRd63ai/2Yg6I1jzifPFKH2NTK+cfglkIA==", "requires": { "sax": ">=0.6.0", "xmlbuilder": "~11.0.0" diff --git a/package.json b/package.json index a0fec11..7cfe6f0 100644 --- a/package.json +++ b/package.json @@ -21,6 +21,6 @@ "pug": "^2.0.4", "request": "^2.88.0", "request-promise": "^4.2.5", - "xml2js": "^0.4.23" + "xml2js": "^0.5.0" } }