From ab3144209840df0074d6a99f8fc164714e643dda Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 16 Aug 2024 12:54:17 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-7361793 --- package-lock.json | 9 +++++---- package.json | 2 +- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index 2aaef98..fef0940 100644 --- a/package-lock.json +++ b/package-lock.json @@ -12,7 +12,7 @@ "@iobroker/adapter-core": "^3.1.6", "@iobroker/plugin-sentry": "^2.0.4", "@snyk/protect": "^1.1291.1", - "axios": "^1.7.2", + "axios": "^1.7.4", "flatted": "^3.3.1", "https": "^1.0.0", "lodash": "^4.17.21", @@ -1586,9 +1586,10 @@ "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==" }, "node_modules/axios": { - "version": "1.7.2", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.2.tgz", - "integrity": "sha512-2A8QhOMrbomlDuiLeK9XibIBzuHeRcqqNOHp0Cyp5EoJ1IFDh+XZH3A6BkXtv0K4gFGCI0Y4BM7B1wOEi0Rmgw==", + "version": "1.7.4", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.4.tgz", + "integrity": "sha512-DukmaFRnY6AzAALSH4J2M3k6PkaC+MfaAGdEERRWcC9q3/TWQwLpHR8ZRLKTdQ3aBDL64EdluRDjJqKw+BPZEw==", + "license": "MIT", "dependencies": { "follow-redirects": "^1.15.6", "form-data": "^4.0.0", diff --git a/package.json b/package.json index 375e31c..f741617 100644 --- a/package.json +++ b/package.json @@ -50,7 +50,7 @@ "@iobroker/adapter-core": "^3.1.6", "@iobroker/plugin-sentry": "^2.0.4", "@snyk/protect": "^1.1291.1", - "axios": "^1.7.2", + "axios": "^1.7.4", "flatted": "^3.3.1", "https": "^1.0.0", "lodash": "^4.17.21",