From f5b3f3162d6102f10f30b88cf82c3f394cfa2db5 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 28 Mar 2024 18:04:03 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-EXPRESS-6474509 - https://snyk.io/vuln/SNYK-JS-MARKDOWNIT-6483324 --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 6d6e820..b9a7acc 100644 --- a/package.json +++ b/package.json @@ -17,7 +17,7 @@ "compression": "^1.7.4", "cookie-parser": "1.4.4", "debug": "^2.6.7", - "express": "^4.17.1", + "express": "^4.19.2", "express-handlebars": "^5.3.1", "express-session": "^1.17.0", "express-state": "^2.0.0", @@ -32,7 +32,7 @@ "junk": "^2.0.0", "lodash": "^4.17.15", "lunr": "^0.7.2", - "markdown-it": "^12.3.2", + "markdown-it": "^13.0.2", "mime-types": "^2.1.26", "mkdirp": "^0.5.1", "moment": "^2.24.0",