From 403a5a9f2d322d08c0cbaaf21d41506e5d4cf088 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 23 Feb 2021 02:30:01 +0000 Subject: [PATCH] fix: packages/bitcore-wallet/package.json & packages/bitcore-wallet/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-1018905 - https://snyk.io/vuln/SNYK-JS-LODASH-1040724 --- packages/bitcore-wallet/package-lock.json | 6 +++--- packages/bitcore-wallet/package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/packages/bitcore-wallet/package-lock.json b/packages/bitcore-wallet/package-lock.json index 4d138a286d7..c09c20663a3 100644 --- a/packages/bitcore-wallet/package-lock.json +++ b/packages/bitcore-wallet/package-lock.json @@ -131,9 +131,9 @@ "integrity": "sha1-u5NdSFgsuhaMBoNJV6VKPgcSTxE=" }, "lodash": { - "version": "3.10.1", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz", - "integrity": "sha1-W/Rejkm6QYnhfUgnid/RW9FAt7Y=" + "version": "4.17.21", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", + "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==" }, "lodash.pad": { "version": "4.5.1", diff --git a/packages/bitcore-wallet/package.json b/packages/bitcore-wallet/package.json index 8143fb7a465..e6f574ff742 100644 --- a/packages/bitcore-wallet/package.json +++ b/packages/bitcore-wallet/package.json @@ -21,7 +21,7 @@ "bitcore-lib": "^8.16.0", "bitcore-wallet-client": "^8.16.0", "commander": "^2.6.0", - "lodash": "^3.3.1", + "lodash": "^4.17.21", "moment": "^2.9.0", "npmlog": "^1.2.0", "qr-image": "^3.1.0",