Skip to content

Commit c8f91fc

Browse files
committed
resolved dependencies that had critical security vulnerabilities
1 parent 8c3ab65 commit c8f91fc

File tree

2 files changed

+61
-37
lines changed

2 files changed

+61
-37
lines changed

Diff for: package.json

+10-2
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@
3030
"babel-eslint": "^6.1.2",
3131
"chai": "^4.2.0",
3232
"chai-enzyme": "^1.0.0-beta.1",
33-
"copy-webpack-plugin": "1.1.1",
33+
"copy-webpack-plugin": "4.0.1",
3434
"copyfiles": "^1.0.0",
3535
"css-loader": "^0.23.1",
3636
"enzyme": "^3.11.0",
@@ -88,7 +88,7 @@
8888
"jshint": "^2.11.0",
8989
"jsonpath": "^0.2.11",
9090
"jszip": "^3.2.1",
91-
"lodash": "^4.13.1",
91+
"lodash": "^4.17.12",
9292
"moment": "^2.14.1",
9393
"prop-types": "^15.6.2",
9494
"react": "^16.12.0",
@@ -102,5 +102,13 @@
102102
"js-beautify" : "^1.10.3",
103103
"enzyme-adapter-react-16": "^1.15.2",
104104
"reactjs-popup" : "^1.5.0"
105+
},
106+
"resolutions": {
107+
"**/**/lodash": "^4.17.12",
108+
"**/**/cryptiles": "^4.1.2",
109+
"**/**/xmlhttprequest-ssl": "^1.6.1",
110+
"**/**/open": "^6.0.0",
111+
"**/**/growl": "^1.10.0",
112+
"**/**/handlebars": "^4.7.7"
105113
}
106114
}

Diff for: yarn.lock

+51-35
Original file line numberDiff line numberDiff line change
@@ -1244,6 +1244,13 @@ [email protected]:
12441244
dependencies:
12451245
hoek "2.x.x"
12461246

1247+
1248+
version "7.3.0"
1249+
resolved "https://registry.yarnpkg.com/boom/-/boom-7.3.0.tgz#733a6d956d33b0b1999da3fe6c12996950d017b9"
1250+
integrity sha512-Swpoyi2t5+GhOEGw8rEsKvTxFLIDiiKoUc2gsoV6Lyr43LHBIzch3k2MvYUs8RTROrIkVJ3Al0TkaOGjnb+B6A==
1251+
dependencies:
1252+
hoek "6.x.x"
1253+
12471254
brace-expansion@^1.1.7:
12481255
version "1.1.11"
12491256
resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-1.1.11.tgz#3c7fcbf529d87226f3d2f52b966ff5271eb441dd"
@@ -2007,15 +2014,17 @@ copy-descriptor@^0.1.0:
20072014
resolved "https://registry.yarnpkg.com/copy-descriptor/-/copy-descriptor-0.1.1.tgz#676f6eb3c39997c2ee1ac3a924fd6124748f578d"
20082015
integrity sha1-Z29us8OZl8LuGsOpJP1hJHSPV40=
20092016

2010-
copy-webpack-plugin@1.1.1:
2011-
version "1.1.1"
2012-
resolved "https://registry.yarnpkg.com/copy-webpack-plugin/-/copy-webpack-plugin-1.1.1.tgz#7ef9321dc2b17d0127b91817095fc6f21021496e"
2013-
integrity sha1-fvkyHcKxfQEnuRgXCV/G8hAhSW4=
2017+
copy-webpack-plugin@4.0.1:
2018+
version "4.0.1"
2019+
resolved "https://registry.yarnpkg.com/copy-webpack-plugin/-/copy-webpack-plugin-4.0.1.tgz#9728e383b94316050d0c7463958f2b85c0aa8200"
2020+
integrity sha1-lyjjg7lDFgUNDHRjlY8rhcCqggA=
20142021
dependencies:
20152022
bluebird "^2.10.2"
20162023
fs-extra "^0.26.4"
20172024
glob "^6.0.4"
2018-
lodash "^3.10.1"
2025+
is-glob "^3.1.0"
2026+
loader-utils "^0.2.15"
2027+
lodash "^4.3.0"
20192028
minimatch "^3.0.0"
20202029
node-dir "^0.1.10"
20212030

@@ -2106,12 +2115,12 @@ cross-spawn@^3.0.0:
21062115
lru-cache "^4.0.1"
21072116
which "^1.2.9"
21082117

2109-
2110-
version "2.0.5"
2111-
resolved "https://registry.yarnpkg.com/cryptiles/-/cryptiles-2.0.5.tgz#3bdfecdc608147c1c67202fa291e7dca59eaa3b8"
2112-
integrity sha1-O9/s3GCBR8HGcgL6KR59ylnqo7g=
2118+
[email protected], cryptiles@^4.1.2:
2119+
version "4.1.3"
2120+
resolved "https://registry.yarnpkg.com/cryptiles/-/cryptiles-4.1.3.tgz#2461d3390ea0b82c643a6ba79f0ed491b0934c25"
2121+
integrity sha512-gT9nyTMSUC1JnziQpPbxKGBbUg8VL7Zn2NB4E1cJYvuXdElHrwxrV9bmltZGDzet45zSDGyYceueke1TjynGzw==
21132122
dependencies:
2114-
boom "2.x.x"
2123+
boom "7.x.x"
21152124

21162125
21172126
version "3.3.0"
@@ -4020,15 +4029,15 @@ graceful-fs@^4.1.11, graceful-fs@^4.1.2, graceful-fs@^4.1.6, graceful-fs@^4.1.9:
40204029
resolved "https://registry.yarnpkg.com/graceful-fs/-/graceful-fs-4.2.3.tgz#4a12ff1b60376ef09862c2093edd908328be8423"
40214030
integrity sha512-a30VEBm4PEdx1dRB7MFK7BejejvCvBronbLjht+sHuGYj8PHs7M/5Z+rt5lw551vZ7yfTCj4Vuyy3mSJytDWRQ==
40224031

4023-
4024-
version "1.9.2"
4025-
resolved "https://registry.yarnpkg.com/growl/-/growl-1.9.2.tgz#0ea7743715db8d8de2c5ede1775e1b45ac85c02f"
4026-
integrity sha1-Dqd0NxXbjY3ixe3hd14bRayFwC8=
4032+
[email protected], growl@^1.10.0:
4033+
version "1.10.5"
4034+
resolved "https://registry.yarnpkg.com/growl/-/growl-1.10.5.tgz#f2735dc2283674fa67478b10181059355c369e5e"
4035+
integrity sha512-qBr4OuELkhPenW6goKVXiv47US3clb3/IbuWF9KNKEijAy9oeHxU9IgzjvJhHkUzhaj7rOUD7+YGWqUjLp5oSA==
40274036

4028-
handlebars@^4.0.1:
4029-
version "4.7.6"
4030-
resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.7.6.tgz#d4c05c1baf90e9945f77aa68a7a219aa4a7df74e"
4031-
integrity sha512-1f2BACcBfiwAfStCKZNrUCgqNZkGsAT7UM3kkYtXuLo0KnaVfjKOyf7PRzB6++aK9STyT1Pd2ZCPe3EGOXleXA==
4037+
handlebars@^4.0.1, handlebars@^4.7.7:
4038+
version "4.7.7"
4039+
resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.7.7.tgz#9ce33416aad02dbd6c8fafa8240d5d98004945a1"
4040+
integrity sha512-aAcXm5OAfE/8IXkcZvCepKU3VzW1/39Fb5ZuqMtgI/hT8X2YgoMvBY5dLhq/cpOvw7Lk1nK/UF71aLG/ZnVYRA==
40324041
dependencies:
40334042
minimist "^1.2.5"
40344043
neo-async "^2.6.0"
@@ -4197,6 +4206,11 @@ [email protected]:
41974206
resolved "https://registry.yarnpkg.com/hoek/-/hoek-2.16.3.tgz#20bb7403d3cea398e91dc4710a8ff1b8274a25ed"
41984207
integrity sha1-ILt0A9POo5jpHcRxCo/xuCdKJe0=
41994208

4209+
4210+
version "6.1.3"
4211+
resolved "https://registry.yarnpkg.com/hoek/-/hoek-6.1.3.tgz#73b7d33952e01fe27a38b0457294b79dd8da242c"
4212+
integrity sha512-YXXAAhmF9zpQbC7LEcREFtXfGq5K1fmd+4PHkBq8NUqmzW3G+Dq10bI/i0KucLRwss3YYFQ0fSfoxBZYiGUqtQ==
4213+
42004214
hoist-non-react-statics@^2.5.0:
42014215
version "2.5.5"
42024216
resolved "https://registry.yarnpkg.com/hoist-non-react-statics/-/hoist-non-react-statics-2.5.5.tgz#c5903cf409c0dfd908f388e619d86b9c1174cb47"
@@ -4829,6 +4843,11 @@ is-windows@^1.0.2:
48294843
resolved "https://registry.yarnpkg.com/is-windows/-/is-windows-1.0.2.tgz#d1850eb9791ecd18e6182ce12a30f396634bb19d"
48304844
integrity sha512-eXK1UInq2bPmjyX6e3VHIzMLobc4J94i4AWn+Hpq3OU5KkrRC96OAcR3PRJ/pGu6m8TRnBHP9dkXQVsT/COVIA==
48314845

4846+
is-wsl@^1.1.0:
4847+
version "1.1.0"
4848+
resolved "https://registry.yarnpkg.com/is-wsl/-/is-wsl-1.1.0.tgz#1f16e4aa22b04d1336b66188a66af3c600c3a66d"
4849+
integrity sha1-HxbkqiKwTRM2tmGIpmrzxgDDpm0=
4850+
48324851
48334852
version "0.0.1"
48344853
resolved "https://registry.yarnpkg.com/isarray/-/isarray-0.0.1.tgz#8a18acfca9a8f4177e09abfc6038939b05d1eedf"
@@ -5536,15 +5555,10 @@ lodash.words@^3.0.0:
55365555
dependencies:
55375556
lodash._root "^3.0.0"
55385557

5539-
lodash@^3.10.1, lodash@^3.8.0:
5540-
version "3.10.1"
5541-
resolved "https://registry.yarnpkg.com/lodash/-/lodash-3.10.1.tgz#5bf45e8e49ba4189e17d482789dfd15bd140b7b6"
5542-
integrity sha1-W/Rejkm6QYnhfUgnid/RW9FAt7Y=
5543-
5544-
lodash@^4.0.0, lodash@^4.1.0, lodash@^4.13.1, lodash@^4.15.0, lodash@^4.17.0, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.2, lodash@^4.17.4, lodash@^4.3.0, lodash@^4.5.0, lodash@~4.17.11, lodash@~4.17.12:
5545-
version "4.17.15"
5546-
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.15.tgz#b447f6670a0455bbfeedd11392eff330ea097548"
5547-
integrity sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==
5558+
lodash@^3.8.0, lodash@^4.0.0, lodash@^4.1.0, lodash@^4.15.0, lodash@^4.17.0, lodash@^4.17.12, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.2, lodash@^4.17.4, lodash@^4.3.0, lodash@^4.5.0, lodash@~4.17.11, lodash@~4.17.12:
5559+
version "4.17.21"
5560+
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
5561+
integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
55485562

55495563
log-symbols@^1.0.2:
55505564
version "1.0.2"
@@ -6389,10 +6403,12 @@ onetime@^1.0.0:
63896403
resolved "https://registry.yarnpkg.com/onetime/-/onetime-1.1.0.tgz#a1f7838f8314c516f05ecefcbc4ccfe04b4ed789"
63906404
integrity sha1-ofeDj4MUxRbwXs78vEzP4EtO14k=
63916405

6392-
6393-
version "0.0.5"
6394-
resolved "https://registry.yarnpkg.com/open/-/open-0.0.5.tgz#42c3e18ec95466b6bf0dc42f3a2945c3f0cad8fc"
6395-
integrity sha1-QsPhjslUZra/DcQvOilFw/DK2Pw=
6406+
[email protected], open@^6.0.0:
6407+
version "6.4.0"
6408+
resolved "https://registry.yarnpkg.com/open/-/open-6.4.0.tgz#5c13e96d0dc894686164f18965ecfe889ecfc8a9"
6409+
integrity sha512-IFenVPgF70fSm1keSd2iDBIDIBZkroLeuffXq+wKTzTJlBpesFWojV9lb8mzOfaAzM1sr7HQHuO0vtV0zYekGg==
6410+
dependencies:
6411+
is-wsl "^1.1.0"
63966412

63976413
optimist@^0.6.1, optimist@~0.6.0, optimist@~0.6.1:
63986414
version "0.6.1"
@@ -9627,10 +9643,10 @@ [email protected]:
96279643
resolved "https://registry.yarnpkg.com/xml-name-validator/-/xml-name-validator-2.0.1.tgz#4d8b8f1eccd3419aa362061becef515e1e559635"
96289644
integrity sha1-TYuPHszTQZqjYgYb7O9RXh5VljU=
96299645

9630-
9631-
version "1.5.3"
9632-
resolved "https://registry.yarnpkg.com/xmlhttprequest-ssl/-/xmlhttprequest-ssl-1.5.3.tgz#185a888c04eca46c3e4070d99f7b49de3528992d"
9633-
integrity sha1-GFqIjATspGw+QHDZn3tJ3jUomS0=
9646+
[email protected], xmlhttprequest-ssl@^1.6.1:
9647+
version "1.6.3"
9648+
resolved "https://registry.yarnpkg.com/xmlhttprequest-ssl/-/xmlhttprequest-ssl-1.6.3.tgz#03b713873b01659dfa2c1c5d056065b27ddc2de6"
9649+
integrity sha512-3XfeQE/wNkvrIktn2Kf0869fC0BN6UpydVasGIeSm2B1Llihf7/0UfZM+eCkOw3P7bP4+qPgqhm7ZoxuJtFU0Q==
96349650

96359651
"xtend@>=4.0.0 <4.1.0-0", xtend@^4.0.0, xtend@~4.0.1:
96369652
version "4.0.2"

0 commit comments

Comments
 (0)