From 49683591b14647df82205d33a46ce444ee4d04f9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 12 Jan 2022 18:41:47 +0000 Subject: [PATCH] fix: dashboard/package.json & dashboard/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-2332181 --- dashboard/package-lock.json | 21 +++++++++++---------- dashboard/package.json | 2 +- 2 files changed, 12 insertions(+), 11 deletions(-) diff --git a/dashboard/package-lock.json b/dashboard/package-lock.json index 2a7b45bd38..594b05d101 100644 --- a/dashboard/package-lock.json +++ b/dashboard/package-lock.json @@ -3475,12 +3475,18 @@ "integrity": "sha512-ReZxvNHIOv88FlT7rxcXIIC0fPt4KZqZbOlivyWtXLt8ESx84zd3kMC6iK5jVeS2qt+g7ftS7ye4fi06X5rtRQ==" }, "axios": { - "version": "0.19.0", - "resolved": "https://registry.npmjs.org/axios/-/axios-0.19.0.tgz", - "integrity": "sha512-1uvKqKQta3KBxIz14F2v06AEHZ/dIoeKfbTRkK1E5oqjDnuEerLmYTgJB5AiQZHJcljpg1TuRzdjDR06qNk0DQ==", + "version": "0.20.0", + "resolved": "https://registry.npmjs.org/axios/-/axios-0.20.0.tgz", + "integrity": "sha512-ANA4rr2BDcmmAQLOKft2fufrtuvlqR+cXNNinUmvfeSNCOF98PZL+7M/v1zIdGo7OLjEA9J2gXJL+j4zGsl0bA==", "requires": { - "follow-redirects": "1.5.10", - "is-buffer": "^2.0.2" + "follow-redirects": "^1.10.0" + }, + "dependencies": { + "follow-redirects": { + "version": "1.14.7", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.7.tgz", + "integrity": "sha512-+hbxoLbFMbRKDwohX8GkTataGqO6Jb7jGwpAlwgy2bIz25XtRm7KEzJM76R1WiNT5SwZkX4Y75SwBolkpmE7iQ==" + } } }, "axobject-query": { @@ -9450,11 +9456,6 @@ "binary-extensions": "^1.0.0" } }, - "is-buffer": { - "version": "2.0.4", - "resolved": "https://registry.npmjs.org/is-buffer/-/is-buffer-2.0.4.tgz", - "integrity": "sha512-Kq1rokWXOPXWuaMAqZiJW4XxsmD9zGx9q4aePabbn3qCRGedtH7Cm+zV8WETitMfu1wdh+Rvd6w5egwSngUX2A==" - }, "is-callable": { "version": "1.1.4", "resolved": "https://registry.npmjs.org/is-callable/-/is-callable-1.1.4.tgz", diff --git a/dashboard/package.json b/dashboard/package.json index 3a550baafd..dea1b9cdc9 100644 --- a/dashboard/package.json +++ b/dashboard/package.json @@ -27,7 +27,7 @@ "dependencies": { "@emotion/core": "^10.0.22", "@emotion/styled": "^10.0.23", - "axios": "^0.19.0", + "axios": "^0.20.0", "classnames": "^2.2.6", "d3": "^5.14.2", "dagre-d3": "^0.6.4",