From 6eb1d9f619e3946ec7661e45524249138039f2d8 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 25 Apr 2023 09:47:11 +0000 Subject: [PATCH] fix: tools/node_modules/eslint/node_modules/fast-levenshtein/package.json & tools/node_modules/eslint/node_modules/fast-levenshtein/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-FSTREAM-174725 - https://snyk.io/vuln/SNYK-JS-GETOBJECT-1054932 - https://snyk.io/vuln/SNYK-JS-GRUNT-2635969 - https://snyk.io/vuln/SNYK-JS-GRUNT-2813632 - https://snyk.io/vuln/SNYK-JS-GRUNT-597546 - https://snyk.io/vuln/SNYK-JS-INI-1048974 - https://snyk.io/vuln/SNYK-JS-JSYAML-174129 - https://snyk.io/vuln/SNYK-JS-LODASH-1018905 - https://snyk.io/vuln/SNYK-JS-LODASH-1040724 - https://snyk.io/vuln/SNYK-JS-LODASH-450202 - https://snyk.io/vuln/SNYK-JS-LODASH-567746 - https://snyk.io/vuln/SNYK-JS-LODASH-608086 - https://snyk.io/vuln/SNYK-JS-LODASH-73638 - https://snyk.io/vuln/SNYK-JS-LODASH-73639 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-1019388 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818 - https://snyk.io/vuln/SNYK-JS-MOCHA-2863123 - https://snyk.io/vuln/SNYK-JS-MOCHA-561476 - https://snyk.io/vuln/SNYK-JS-QS-3153490 - https://snyk.io/vuln/SNYK-JS-SHELLJS-2332187 - https://snyk.io/vuln/SNYK-JS-TAR-174125 - https://snyk.io/vuln/SNYK-JS-UGLIFYJS-1727251 - https://snyk.io/vuln/SNYK-JS-UNDERSCORE-1080984 - https://snyk.io/vuln/npm:chownr:20180731 - https://snyk.io/vuln/npm:cli:20160615 - https://snyk.io/vuln/npm:growl:20160721 - https://snyk.io/vuln/npm:hawk:20160119 - https://snyk.io/vuln/npm:http-signature:20150122 - https://snyk.io/vuln/npm:lodash:20180130 - https://snyk.io/vuln/npm:mime:20170907 - https://snyk.io/vuln/npm:minimatch:20160620 - https://snyk.io/vuln/npm:ms:20151024 - https://snyk.io/vuln/npm:ms:20170412 - https://snyk.io/vuln/npm:npm:20160418 - https://snyk.io/vuln/npm:qs:20140806 - https://snyk.io/vuln/npm:qs:20140806-1 - https://snyk.io/vuln/npm:qs:20170213 - https://snyk.io/vuln/npm:request:20160119 - https://snyk.io/vuln/npm:semver:20150403 - https://snyk.io/vuln/npm:tar:20151103 - https://snyk.io/vuln/npm:tough-cookie:20160722 - https://snyk.io/vuln/npm:tough-cookie:20170905 - https://snyk.io/vuln/npm:uglify-js:20151024 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:mime:20170907 - https://snyk.io/vuln/npm:semver:20150403 --- .../node_modules/fast-levenshtein/.snyk | 11 ++++++++ .../fast-levenshtein/package.json | 25 +++++++++++-------- 2 files changed, 26 insertions(+), 10 deletions(-) create mode 100644 tools/node_modules/eslint/node_modules/fast-levenshtein/.snyk diff --git a/tools/node_modules/eslint/node_modules/fast-levenshtein/.snyk b/tools/node_modules/eslint/node_modules/fast-levenshtein/.snyk new file mode 100644 index 00000000000000..bf6484271bf13d --- /dev/null +++ b/tools/node_modules/eslint/node_modules/fast-levenshtein/.snyk @@ -0,0 +1,11 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:mime:20170907': + - grunt-npm-install > npm > request > mime: + patched: '2023-04-25T09:47:07.948Z' + 'npm:semver:20150403': + - grunt-npm-install > npm > npmconf > semver: + patched: '2023-04-25T09:47:07.948Z' diff --git a/tools/node_modules/eslint/node_modules/fast-levenshtein/package.json b/tools/node_modules/eslint/node_modules/fast-levenshtein/package.json index 5b4736d4537a5e..c28be73f955fc8 100644 --- a/tools/node_modules/eslint/node_modules/fast-levenshtein/package.json +++ b/tools/node_modules/eslint/node_modules/fast-levenshtein/package.json @@ -8,22 +8,23 @@ ], "scripts": { "build": "grunt build", - "prepublish": "npm run build", + "prepublish": "npm run snyk-protect && npm run build", "benchmark": "grunt benchmark", - "test": "mocha" + "test": "mocha", + "snyk-protect": "snyk-protect" }, "devDependencies": { "chai": "~1.5.0", - "grunt": "~0.4.1", + "grunt": "~1.5.3", "grunt-benchmark": "~0.2.0", "grunt-cli": "^1.2.0", - "grunt-contrib-jshint": "~0.4.3", - "grunt-contrib-uglify": "~0.2.0", - "grunt-mocha-test": "~0.2.2", - "grunt-npm-install": "~0.1.0", - "load-grunt-tasks": "~0.6.0", + "grunt-contrib-jshint": "~0.11.1", + "grunt-contrib-uglify": "~4.0.1", + "grunt-mocha-test": "~0.12.0", + "grunt-npm-install": "~0.2.0", + "load-grunt-tasks": "~3.3.0", "lodash": "^4.0.1", - "mocha": "~1.9.0" + "mocha": "~10.1.0" }, "repository": { "type": "git", @@ -35,5 +36,9 @@ "string" ], "author": "Ramesh Nair (http://www.hiddentao.com/)", - "license": "MIT" + "license": "MIT", + "snyk": true, + "dependencies": { + "@snyk/protect": "latest" + } }