diff --git a/.snyk b/.snyk index 2df574952e7..fb71fbcbad7 100644 --- a/.snyk +++ b/.snyk @@ -3,7 +3,7 @@ exclude: code: - tests/** - test.spec.js -version: v1.25.0 +version: v1.25.1 # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: 'npm:mem:20180117': @@ -11,4 +11,62 @@ ignore: reason: I don't want to fix this expires: 2023-01-13T14:50:13.540Z created: 2022-12-14T14:50:13.544Z -patch: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:debug:20170905': + - tap > tap-mocha-reporter > debug: + patched: '2025-09-25T19:32:56.981Z' + id: 'npm:debug:20170905' + path: tap > tap-mocha-reporter > debug + SNYK-JS-LODASH-567746: + - tap > nyc > istanbul-lib-instrument > babel-types > lodash: + patched: '2025-09-25T19:32:56.981Z' + id: SNYK-JS-LODASH-567746 + path: tap > nyc > istanbul-lib-instrument > babel-types > lodash + - tap > nyc > istanbul-lib-instrument > babel-generator > lodash: + patched: '2025-09-25T19:32:56.981Z' + id: SNYK-JS-LODASH-567746 + path: tap > nyc > istanbul-lib-instrument > babel-generator > lodash + - tap > nyc > istanbul-lib-instrument > babel-traverse > lodash: + patched: '2025-09-25T19:32:56.981Z' + id: SNYK-JS-LODASH-567746 + path: tap > nyc > istanbul-lib-instrument > babel-traverse > lodash + - tap > nyc > istanbul-lib-instrument > babel-template > lodash: + patched: '2025-09-25T19:32:56.981Z' + id: SNYK-JS-LODASH-567746 + path: tap > nyc > istanbul-lib-instrument > babel-template > lodash + - tap > nyc > istanbul-lib-instrument > babel-generator > babel-types > lodash: + patched: '2025-09-25T19:32:56.981Z' + id: SNYK-JS-LODASH-567746 + path: >- + tap > nyc > istanbul-lib-instrument > babel-generator > babel-types > + lodash + - tap > nyc > istanbul-lib-instrument > babel-traverse > babel-types > lodash: + patched: '2025-09-25T19:32:56.981Z' + id: SNYK-JS-LODASH-567746 + path: >- + tap > nyc > istanbul-lib-instrument > babel-traverse > babel-types > + lodash + - tap > nyc > istanbul-lib-instrument > babel-template > babel-types > lodash: + patched: '2025-09-25T19:32:56.981Z' + id: SNYK-JS-LODASH-567746 + path: >- + tap > nyc > istanbul-lib-instrument > babel-template > babel-types > + lodash + - tap > nyc > istanbul-lib-instrument > babel-template > babel-traverse > lodash: + patched: '2025-09-25T19:32:56.981Z' + id: SNYK-JS-LODASH-567746 + path: >- + tap > nyc > istanbul-lib-instrument > babel-template > babel-traverse + > lodash + - tap > nyc > istanbul-lib-instrument > babel-template > babel-traverse > babel-types > lodash: + patched: '2025-09-25T19:32:56.981Z' + id: SNYK-JS-LODASH-567746 + path: >- + tap > nyc > istanbul-lib-instrument > babel-template > babel-traverse + > babel-types > lodash + 'npm:ms:20170412': + - tap > tap-mocha-reporter > debug > ms: + patched: '2025-09-25T19:32:56.981Z' + id: 'npm:ms:20170412' + path: tap > tap-mocha-reporter > debug > ms diff --git a/package.json b/package.json index 2dc39e2ebed..2f3e97f697c 100644 --- a/package.json +++ b/package.json @@ -15,48 +15,52 @@ "start": "node app.js", "build": "browserify -r jquery > public/js/bundle.js", "cleanup": "mongo express-todo --eval 'db.todos.remove({});'", - "test": "snyk test" + "test": "snyk test", + "prepare": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "dependencies": { - "adm-zip": "0.4.7", - "body-parser": "1.9.0", + "adm-zip": "0.5.2", + "body-parser": "1.20.3", "cfenv": "^1.0.4", "consolidate": "0.14.5", "dustjs-helpers": "1.5.0", - "dustjs-linkedin": "2.5.0", - "ejs": "1.0.0", + "dustjs-linkedin": "3.0.0", + "ejs": "3.1.10", "ejs-locals": "1.0.2", - "errorhandler": "1.2.0", - "express": "4.12.4", - "express-fileupload": "0.0.5", - "express-session": "^1.17.2", + "errorhandler": "1.4.3", + "express": "4.21.2", + "express-fileupload": "1.1.10", + "express-session": "^1.18.2", "file-type": "^8.1.0", "hbs": "^4.0.4", - "humanize-ms": "1.0.1", - "jquery": "^2.2.4", - "lodash": "4.17.4", - "marked": "0.3.5", + "humanize-ms": "1.2.1", + "jquery": "^3.5.0", + "lodash": "4.17.21", + "marked": "4.0.10", "method-override": "latest", - "moment": "2.15.1", + "moment": "2.29.2", "mongodb": "^3.5.9", - "mongoose": "4.2.4", - "morgan": "latest", - "ms": "^0.7.1", + "mongoose": "6.13.6", + "morgan": "1.10.1", + "ms": "^2.0.0", "mysql": "^2.18.1", - "npmconf": "0.0.24", + "npmconf": "2.1.3", "openai": "^5.23.0", "optional": "^0.1.3", "qrious": "^4.0.2", - "st": "0.2.4", + "st": "1.2.2", "stream-buffers": "^3.0.1", - "tap": "^11.1.3", - "typeorm": "^0.2.24", - "validator": "^13.5.2" + "tap": "^18.0.0", + "typeorm": "^0.3.18", + "validator": "^13.5.2", + "@snyk/protect": "latest" }, "devDependencies": { "browserify": "^13.1.1", "nodemon": "^2.0.7", - "snyk": "^1.244.0" + "snyk": "^1.1299.1" }, - "license": "Apache-2.0" + "license": "Apache-2.0", + "snyk": true }