From 1fec274c160ae4b2e2ea20fc8abc32909f2bc5f8 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 21 Oct 2023 01:07:31 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TINYMCE-6016276 - https://snyk.io/vuln/SNYK-JS-TINYMCE-6016290 --- package.json | 2 +- yarn.lock | 7 ++++--- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index fc68d09..024e85d 100644 --- a/package.json +++ b/package.json @@ -9,7 +9,7 @@ "jquery": "3.0.0-alpha1", "express": "4.1.1", "boom": "", - "tinymce": "4.2.3", + "tinymce": "5.10.8", "console-io": "2.6.3", "angular": "1.3.19", "nodejs-repo-tools": "git+https://github.com/GoogleCloudPlatform/nodejs-repo-tools.git#bbbb6035d77671eb053dbe6b6f0e3ff983f79639", diff --git a/yarn.lock b/yarn.lock index 37257f2..f42f86e 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2074,9 +2074,10 @@ timem@~1.1.0: version "1.1.2" resolved "https://registry.yarnpkg.com/timem/-/timem-1.1.2.tgz#fe93006c28253a8da5c49299306991fa4cc4f40c" -tinymce@4.2.3: - version "4.2.3" - resolved "https://registry.yarnpkg.com/tinymce/-/tinymce-4.2.3.tgz#8d742fdc17026fac53e779a1a63ec2756e38965d" +tinymce@5.10.8: + version "5.10.8" + resolved "https://registry.yarnpkg.com/tinymce/-/tinymce-5.10.8.tgz#c85758fa3cca2cbb4b14dd037a0b315b6462c50e" + integrity sha512-iyoo3VGMAJhLMDdblAefKvYgBRk9kQi58GTwAmoieqsyggGsKZWlQl/YY6nTILFHUCA1FhYu0HdmM5YYjs17UQ== to-array@0.1.4: version "0.1.4"