From 44637e5df1bc8e22312e845abddbcea91d1a8047 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 20 Jun 2023 18:23:08 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-SEMVER-3247795 --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 51c5fb3..831c158 100644 --- a/package.json +++ b/package.json @@ -40,7 +40,7 @@ "react-markdown": "^8.0.7", "react-router-dom": "^6.11.1", "react-scripts": "5.0.1", - "semver": "^7.5.0", + "semver": "^7.5.2", "typescript": "^5.0.4", "url-parse": "^1.5.10", "util": "^0.12.5", diff --git a/yarn.lock b/yarn.lock index 6dbbfe0..bd7aab7 100644 --- a/yarn.lock +++ b/yarn.lock @@ -9726,10 +9726,10 @@ semver@^7.3.2, semver@^7.3.5, semver@^7.3.7, semver@^7.3.8: dependencies: lru-cache "^6.0.0" -semver@^7.5.0: - version "7.5.0" - resolved "https://registry.yarnpkg.com/semver/-/semver-7.5.0.tgz#ed8c5dc8efb6c629c88b23d41dc9bf40c1d96cd0" - integrity sha512-+XC0AD/R7Q2mPSRuy2Id0+CGTZ98+8f+KvwirxOKIEyid+XSx6HbC63p+O4IndTHuX5Z+JxQ0TghCkO5Cg/2HA== +semver@^7.5.2: + version "7.5.2" + resolved "https://registry.yarnpkg.com/semver/-/semver-7.5.2.tgz#5b851e66d1be07c1cdaf37dfc856f543325a2beb" + integrity sha512-SoftuTROv/cRjCze/scjGyiDtcUyxw1rgYQSZY7XTmtR5hX+dm76iDbTH8TkLPHCQmlbQVSSbNZCPM2hb0knnQ== dependencies: lru-cache "^6.0.0"