From 0ac1f5fa38ef8c0a7d4f6bb2d2cb7928a9ccfd04 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 23 Dec 2022 08:27:43 +0000 Subject: [PATCH] fix: app/package.json & app/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-JSONWEBTOKEN-3180020 - https://snyk.io/vuln/SNYK-JS-JSONWEBTOKEN-3180022 - https://snyk.io/vuln/SNYK-JS-JSONWEBTOKEN-3180024 - https://snyk.io/vuln/SNYK-JS-JSONWEBTOKEN-3180026 --- app/package-lock.json | 271 +++++++++++++++--------------------------- app/package.json | 2 +- 2 files changed, 100 insertions(+), 173 deletions(-) diff --git a/app/package-lock.json b/app/package-lock.json index 3660da2..087a907 100644 --- a/app/package-lock.json +++ b/app/package-lock.json @@ -2,7 +2,13 @@ "name": "Pixi", "version": "1.0.0", "lockfileVersion": 1, + "requires": true, "dependencies": { + "JSONSelect": { + "version": "0.4.0", + "resolved": "https://registry.npmjs.org/JSONSelect/-/JSONSelect-0.4.0.tgz", + "integrity": "sha1-oI7cxn6z/L6Z7WMIVTRKDPKCu40=" + }, "abbrev": { "version": "1.1.0", "resolved": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.0.tgz", @@ -148,8 +154,7 @@ "bcrypt-pbkdf": { "version": "1.0.1", "resolved": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.1.tgz", - "integrity": "sha1-Y7xdy2EzG5K8Bf1SiVPDNGKgb40=", - "optional": true + "integrity": "sha1-Y7xdy2EzG5K8Bf1SiVPDNGKgb40=" }, "binary-extensions": { "version": "1.8.0", @@ -551,8 +556,7 @@ "ecc-jsbn": { "version": "0.1.1", "resolved": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.1.tgz", - "integrity": "sha1-D8c6ntXw1Tw4GTOYUj735UN3dQU=", - "optional": true + "integrity": "sha1-D8c6ntXw1Tw4GTOYUj735UN3dQU=" }, "ecdsa-sig-formatter": { "version": "1.0.9", @@ -760,17 +764,14 @@ "version": "1.1.2", "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-1.1.2.tgz", "integrity": "sha512-Sn44E5wQW4bTHXvQmvSHwqbuiXtduD6Rrjm2ZtUEGbyrig+nUH3t/QD4M4/ZXViY556TBpRgZkHLDx3JxPwxiw==", - "optional": true, "dependencies": { "abbrev": { "version": "1.1.0", - "bundled": true, - "optional": true + "bundled": true }, "ajv": { "version": "4.11.8", - "bundled": true, - "optional": true + "bundled": true }, "ansi-regex": { "version": "2.1.1", @@ -778,38 +779,31 @@ }, "aproba": { "version": "1.1.1", - "bundled": true, - "optional": true + "bundled": true }, "are-we-there-yet": { "version": "1.1.4", - "bundled": true, - "optional": true + "bundled": true }, "asn1": { "version": "0.2.3", - "bundled": true, - "optional": true + "bundled": true }, "assert-plus": { "version": "0.2.0", - "bundled": true, - "optional": true + "bundled": true }, "asynckit": { "version": "0.4.0", - "bundled": true, - "optional": true + "bundled": true }, "aws-sign2": { "version": "0.6.0", - "bundled": true, - "optional": true + "bundled": true }, "aws4": { "version": "1.6.0", - "bundled": true, - "optional": true + "bundled": true }, "balanced-match": { "version": "0.4.2", @@ -817,8 +811,7 @@ }, "bcrypt-pbkdf": { "version": "1.0.1", - "bundled": true, - "optional": true + "bundled": true }, "block-stream": { "version": "0.0.9", @@ -838,13 +831,11 @@ }, "caseless": { "version": "0.12.0", - "bundled": true, - "optional": true + "bundled": true }, "co": { "version": "4.6.0", - "bundled": true, - "optional": true + "bundled": true }, "code-point-at": { "version": "1.1.0", @@ -868,30 +859,25 @@ }, "cryptiles": { "version": "2.0.5", - "bundled": true, - "optional": true + "bundled": true }, "dashdash": { "version": "1.14.1", "bundled": true, - "optional": true, "dependencies": { "assert-plus": { "version": "1.0.0", - "bundled": true, - "optional": true + "bundled": true } } }, "debug": { "version": "2.6.8", - "bundled": true, - "optional": true + "bundled": true }, "deep-extend": { "version": "0.4.2", - "bundled": true, - "optional": true + "bundled": true }, "delayed-stream": { "version": "1.0.0", @@ -899,18 +885,15 @@ }, "delegates": { "version": "1.0.0", - "bundled": true, - "optional": true + "bundled": true }, "ecc-jsbn": { "version": "0.1.1", - "bundled": true, - "optional": true + "bundled": true }, "extend": { "version": "3.0.1", - "bundled": true, - "optional": true + "bundled": true }, "extsprintf": { "version": "1.0.2", @@ -918,13 +901,11 @@ }, "forever-agent": { "version": "0.6.1", - "bundled": true, - "optional": true + "bundled": true }, "form-data": { "version": "2.1.4", - "bundled": true, - "optional": true + "bundled": true }, "fs.realpath": { "version": "1.0.0", @@ -936,23 +917,19 @@ }, "fstream-ignore": { "version": "1.0.5", - "bundled": true, - "optional": true + "bundled": true }, "gauge": { "version": "2.7.4", - "bundled": true, - "optional": true + "bundled": true }, "getpass": { "version": "0.1.7", "bundled": true, - "optional": true, "dependencies": { "assert-plus": { "version": "1.0.0", - "bundled": true, - "optional": true + "bundled": true } } }, @@ -966,23 +943,19 @@ }, "har-schema": { "version": "1.0.5", - "bundled": true, - "optional": true + "bundled": true }, "har-validator": { "version": "4.2.1", - "bundled": true, - "optional": true + "bundled": true }, "has-unicode": { "version": "2.0.1", - "bundled": true, - "optional": true + "bundled": true }, "hawk": { "version": "3.1.3", - "bundled": true, - "optional": true + "bundled": true }, "hoek": { "version": "2.16.3", @@ -990,8 +963,7 @@ }, "http-signature": { "version": "1.1.1", - "bundled": true, - "optional": true + "bundled": true }, "inflight": { "version": "1.0.6", @@ -1003,8 +975,7 @@ }, "ini": { "version": "1.3.4", - "bundled": true, - "optional": true + "bundled": true }, "is-fullwidth-code-point": { "version": "1.0.0", @@ -1012,8 +983,7 @@ }, "is-typedarray": { "version": "1.0.0", - "bundled": true, - "optional": true + "bundled": true }, "isarray": { "version": "1.0.0", @@ -1021,48 +991,39 @@ }, "isstream": { "version": "0.1.2", - "bundled": true, - "optional": true + "bundled": true }, "jodid25519": { "version": "1.0.2", - "bundled": true, - "optional": true + "bundled": true }, "jsbn": { "version": "0.1.1", - "bundled": true, - "optional": true + "bundled": true }, "json-schema": { "version": "0.2.3", - "bundled": true, - "optional": true + "bundled": true }, "json-stable-stringify": { "version": "1.0.1", - "bundled": true, - "optional": true + "bundled": true }, "json-stringify-safe": { "version": "5.0.1", - "bundled": true, - "optional": true + "bundled": true }, "jsonify": { "version": "0.0.0", - "bundled": true, - "optional": true + "bundled": true }, "jsprim": { "version": "1.4.0", "bundled": true, - "optional": true, "dependencies": { "assert-plus": { "version": "1.0.0", - "bundled": true, - "optional": true + "bundled": true } } }, @@ -1088,23 +1049,19 @@ }, "ms": { "version": "2.0.0", - "bundled": true, - "optional": true + "bundled": true }, "node-pre-gyp": { "version": "0.6.36", - "bundled": true, - "optional": true + "bundled": true }, "nopt": { "version": "4.0.1", - "bundled": true, - "optional": true + "bundled": true }, "npmlog": { "version": "4.1.0", - "bundled": true, - "optional": true + "bundled": true }, "number-is-nan": { "version": "1.0.1", @@ -1112,13 +1069,11 @@ }, "oauth-sign": { "version": "0.8.2", - "bundled": true, - "optional": true + "bundled": true }, "object-assign": { "version": "4.1.1", - "bundled": true, - "optional": true + "bundled": true }, "once": { "version": "1.4.0", @@ -1126,18 +1081,15 @@ }, "os-homedir": { "version": "1.0.2", - "bundled": true, - "optional": true + "bundled": true }, "os-tmpdir": { "version": "1.0.2", - "bundled": true, - "optional": true + "bundled": true }, "osenv": { "version": "0.1.4", - "bundled": true, - "optional": true + "bundled": true }, "path-is-absolute": { "version": "1.0.1", @@ -1145,8 +1097,7 @@ }, "performance-now": { "version": "0.2.0", - "bundled": true, - "optional": true + "bundled": true }, "process-nextick-args": { "version": "1.0.7", @@ -1154,23 +1105,19 @@ }, "punycode": { "version": "1.4.1", - "bundled": true, - "optional": true + "bundled": true }, "qs": { "version": "6.4.0", - "bundled": true, - "optional": true + "bundled": true }, "rc": { "version": "1.2.1", "bundled": true, - "optional": true, "dependencies": { "minimist": { "version": "1.2.0", - "bundled": true, - "optional": true + "bundled": true } } }, @@ -1180,8 +1127,7 @@ }, "request": { "version": "2.81.0", - "bundled": true, - "optional": true + "bundled": true }, "rimraf": { "version": "2.6.1", @@ -1193,48 +1139,41 @@ }, "semver": { "version": "5.3.0", - "bundled": true, - "optional": true + "bundled": true }, "set-blocking": { "version": "2.0.0", - "bundled": true, - "optional": true + "bundled": true }, "signal-exit": { "version": "3.0.2", - "bundled": true, - "optional": true + "bundled": true }, "sntp": { "version": "1.0.9", - "bundled": true, - "optional": true + "bundled": true }, "sshpk": { "version": "1.13.0", "bundled": true, - "optional": true, "dependencies": { "assert-plus": { "version": "1.0.0", - "bundled": true, - "optional": true + "bundled": true } } }, - "string_decoder": { - "version": "1.0.1", - "bundled": true - }, "string-width": { "version": "1.0.2", "bundled": true }, + "string_decoder": { + "version": "1.0.1", + "bundled": true + }, "stringstream": { "version": "0.0.5", - "bundled": true, - "optional": true + "bundled": true }, "strip-ansi": { "version": "3.0.1", @@ -1242,8 +1181,7 @@ }, "strip-json-comments": { "version": "2.0.1", - "bundled": true, - "optional": true + "bundled": true }, "tar": { "version": "2.2.1", @@ -1251,28 +1189,23 @@ }, "tar-pack": { "version": "3.4.0", - "bundled": true, - "optional": true + "bundled": true }, "tough-cookie": { "version": "2.3.2", - "bundled": true, - "optional": true + "bundled": true }, "tunnel-agent": { "version": "0.6.0", - "bundled": true, - "optional": true + "bundled": true }, "tweetnacl": { "version": "0.14.5", - "bundled": true, - "optional": true + "bundled": true }, "uid-number": { "version": "0.0.6", - "bundled": true, - "optional": true + "bundled": true }, "util-deprecate": { "version": "1.0.2", @@ -1280,18 +1213,15 @@ }, "uuid": { "version": "3.0.1", - "bundled": true, - "optional": true + "bundled": true }, "verror": { "version": "1.3.6", - "bundled": true, - "optional": true + "bundled": true }, "wide-align": { "version": "1.1.2", - "bundled": true, - "optional": true + "bundled": true }, "wrappy": { "version": "1.0.2", @@ -1626,8 +1556,7 @@ "jsbn": { "version": "0.1.1", "resolved": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz", - "integrity": "sha1-peZUwuWi3rXyAdls77yoDA7y9RM=", - "optional": true + "integrity": "sha1-peZUwuWi3rXyAdls77yoDA7y9RM=" }, "json-schema": { "version": "0.2.3", @@ -1659,15 +1588,16 @@ "resolved": "https://registry.npmjs.org/jsonpointer/-/jsonpointer-4.0.1.tgz", "integrity": "sha1-T9kss04OnbPInIYi7PUfm5eMbLk=" }, - "JSONSelect": { - "version": "0.4.0", - "resolved": "https://registry.npmjs.org/JSONSelect/-/JSONSelect-0.4.0.tgz", - "integrity": "sha1-oI7cxn6z/L6Z7WMIVTRKDPKCu40=" - }, "jsonwebtoken": { - "version": "7.4.1", - "resolved": "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-7.4.1.tgz", - "integrity": "sha1-fKMk9SFfi+A5zTWmxFu4y3SkSPs=" + "version": "9.0.0", + "resolved": "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-9.0.0.tgz", + "integrity": "sha512-tuGfYXxkQGDPnLJ7SibiQgVgeDgfbPq2k2ICcbgqW8WxWLBAxKQM/ZCu/IT8SOSwmaYl4dpTFCW5xZv7YbbWUw==", + "requires": { + "jws": "^3.2.2", + "lodash": "^4.17.21", + "ms": "^2.1.1", + "semver": "^7.3.8" + } }, "jsprim": { "version": "1.4.0", @@ -1927,8 +1857,7 @@ "nan": { "version": "2.6.2", "resolved": "https://registry.npmjs.org/nan/-/nan-2.6.2.tgz", - "integrity": "sha1-5P805slf37WuzAjeZZb0NgWn20U=", - "optional": true + "integrity": "sha1-5P805slf37WuzAjeZZb0NgWn20U=" }, "natural": { "version": "0.1.29", @@ -2467,8 +2396,7 @@ "source-map": { "version": "0.5.6", "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.5.6.tgz", - "integrity": "sha1-dc449SvwczxafwwRjYEzSiu19BI=", - "optional": true + "integrity": "sha1-dc449SvwczxafwwRjYEzSiu19BI=" }, "split": { "version": "0.3.3", @@ -2517,16 +2445,16 @@ "resolved": "https://registry.npmjs.org/streamsearch/-/streamsearch-0.1.2.tgz", "integrity": "sha1-gIudDlb8Jz2Am6VzOOkpkZoanxo=" }, - "string_decoder": { - "version": "1.0.3", - "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.0.3.tgz", - "integrity": "sha512-4AH6Z5fzNNBcH+6XDMfA/BTt87skxqJlO0lAh3Dker5zThcAxG6mKz+iGu308UKoPPQ8Dcqx/4JhujzltRa+hQ==" - }, "string-length": { "version": "1.0.1", "resolved": "https://registry.npmjs.org/string-length/-/string-length-1.0.1.tgz", "integrity": "sha1-VpcPscOFWOnnC3KL894mmsRa36w=" }, + "string_decoder": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.0.3.tgz", + "integrity": "sha512-4AH6Z5fzNNBcH+6XDMfA/BTt87skxqJlO0lAh3Dker5zThcAxG6mKz+iGu308UKoPPQ8Dcqx/4JhujzltRa+hQ==" + }, "stringstream": { "version": "0.0.5", "resolved": "https://registry.npmjs.org/stringstream/-/stringstream-0.0.5.tgz", @@ -2637,8 +2565,7 @@ "tweetnacl": { "version": "0.14.5", "resolved": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz", - "integrity": "sha1-WuaBd/GS1EViadEIr6k/+HQ/T2Q=", - "optional": true + "integrity": "sha1-WuaBd/GS1EViadEIr6k/+HQ/T2Q=" }, "type-is": { "version": "1.6.15", @@ -2768,4 +2695,4 @@ "integrity": "sha1-5CIZa17+YLRq3vPD8q7y3qqREWE=" } } -} \ No newline at end of file +} diff --git a/app/package.json b/app/package.json index 8631663..a1f4c3c 100644 --- a/app/package.json +++ b/app/package.json @@ -20,7 +20,7 @@ "express-unless": "^0.3.0", "faker": "^4.1.0", "image-downloader": "^3.2.2", - "jsonwebtoken": "^7.4.1", + "jsonwebtoken": "^9.0.0", "mongo-sequence": "^0.1.5", "mongodb": "^2.2.11", "multer": "^1.3.0",