From 1cb75bdd3242fe394f99b4a0d03b26a32283b7ce Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 10 Feb 2021 01:57:39 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-EJS-1049328 - https://snyk.io/vuln/SNYK-JS-MARKED-1070800 --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 5978388..ff3dfa5 100644 --- a/package.json +++ b/package.json @@ -23,11 +23,11 @@ "csurf": "^1.10.0", "dompurify": "^2.0.7", "dotenv": "^8.1.0", - "ejs": "^2.6.2", + "ejs": "^3.1.6", "express": "^4.17.1", "express-session": "^1.16.2", "jsonwebtoken": "^8.5.1", - "marked": "^1.1.1", + "marked": "^2.0.0", "md5": "^2.2.1", "mongodb": "^3.3.0", "nodemon": "^2.0.3",