From b6500c0424094350d81ddecfad3893b393dc38d3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 24 Apr 2023 22:54:45 +0000 Subject: [PATCH] fix: node_modules/path-to-regexp/package.json & node_modules/path-to-regexp/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-DOTPROP-543489 - https://snyk.io/vuln/SNYK-JS-LODASH-1018905 - https://snyk.io/vuln/SNYK-JS-LODASH-1040724 - https://snyk.io/vuln/SNYK-JS-LODASH-450202 - https://snyk.io/vuln/SNYK-JS-LODASH-567746 - https://snyk.io/vuln/SNYK-JS-LODASH-608086 - https://snyk.io/vuln/SNYK-JS-LODASH-73638 - https://snyk.io/vuln/SNYK-JS-LODASH-73639 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-1019388 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818 - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-MOCHA-2863123 - https://snyk.io/vuln/SNYK-JS-MOCHA-561476 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:growl:20160721 - https://snyk.io/vuln/npm:lodash:20180130 - https://snyk.io/vuln/npm:minimatch:20160620 - https://snyk.io/vuln/npm:ms:20151024 - https://snyk.io/vuln/npm:ms:20170412 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:lodash:20180130 --- node_modules/path-to-regexp/.snyk | 8 ++++++++ node_modules/path-to-regexp/package.json | 21 ++++++++++++--------- 2 files changed, 20 insertions(+), 9 deletions(-) create mode 100644 node_modules/path-to-regexp/.snyk diff --git a/node_modules/path-to-regexp/.snyk b/node_modules/path-to-regexp/.snyk new file mode 100644 index 0000000000..ddbf0232e4 --- /dev/null +++ b/node_modules/path-to-regexp/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:lodash:20180130': + - standard > standard-format > esformatter-jsx > babel-core > babel-plugin-proto-to-assign > lodash: + patched: '2023-04-24T22:54:42.279Z' diff --git a/node_modules/path-to-regexp/package.json b/node_modules/path-to-regexp/package.json index c58301982e..8b3b9ca0ef 100644 --- a/node_modules/path-to-regexp/package.json +++ b/node_modules/path-to-regexp/package.json @@ -13,8 +13,9 @@ "lint": "standard", "test-spec": "mocha --require ts-node/register -R spec --bail test.ts", "test-cov": "istanbul cover node_modules/mocha/bin/_mocha -- --require ts-node/register -R spec test.ts", - "prepublish": "typings install", - "test": "npm run lint && npm run test-cov" + "prepublish": "npm run snyk-protect && typings install", + "test": "npm run lint && npm run test-cov", + "snyk-protect": "snyk-protect" }, "keywords": [ "express", @@ -34,14 +35,16 @@ }, "devDependencies": { "chai": "^2.3.0", - "istanbul": "~0.3.0", - "mocha": "~2.2.4", - "standard": "~3.7.3", - "ts-node": "^0.5.5", + "istanbul": "~0.4.5", + "mocha": "~10.1.0", + "standard": "~6.0.0", + "ts-node": "^3.2.0", "typescript": "^1.8.7", - "typings": "^1.0.4" + "typings": "^2.1.1" }, "dependencies": { - "isarray": "0.0.1" - } + "isarray": "0.0.1", + "@snyk/protect": "latest" + }, + "snyk": true } \ No newline at end of file