From b4b79dac001d8bdb4f89ca4c17363adff829796e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 2 Apr 2026 09:10:44 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-15869625 - https://snyk.io/vuln/SNYK-JS-LODASH-15869619 --- package-lock.json | 8 ++++---- package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index 9328e5d..57d63ed 100644 --- a/package-lock.json +++ b/package-lock.json @@ -18,7 +18,7 @@ "date-fns": "^4.1.0", "drizzle-orm": "^0.45.1", "escape-json-node": "^2.0.0", - "lodash": "^4.17.23", + "lodash": "^4.18.1", "luxon": "^3.4.4", "moment": "^2.29.4", "mysql2": "3.16.0", @@ -11917,9 +11917,9 @@ } }, "node_modules/lodash": { - "version": "4.17.23", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz", - "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==", + "version": "4.18.1", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz", + "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==", "license": "MIT" }, "node_modules/lodash.defaults": { diff --git a/package.json b/package.json index 8102d60..2f1c9cc 100644 --- a/package.json +++ b/package.json @@ -42,7 +42,7 @@ "date-fns": "^4.1.0", "drizzle-orm": "^0.45.1", "escape-json-node": "^2.0.0", - "lodash": "^4.17.23", + "lodash": "^4.18.1", "luxon": "^3.4.4", "moment": "^2.29.4", "mysql2": "3.16.0",