From 1414d102d5c52976df50af8cfb95187388d122e8 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 17 Nov 2020 05:12:19 +0000 Subject: [PATCH] fix: src/ProjectTemplates/Web.Spa.ProjectTemplates/content/React-CSharp/ClientApp/package.json & src/ProjectTemplates/Web.Spa.ProjectTemplates/content/React-CSharp/ClientApp/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MERGE-1040469 --- .../content/React-CSharp/ClientApp/package-lock.json | 6 +++--- .../content/React-CSharp/ClientApp/package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/src/ProjectTemplates/Web.Spa.ProjectTemplates/content/React-CSharp/ClientApp/package-lock.json b/src/ProjectTemplates/Web.Spa.ProjectTemplates/content/React-CSharp/ClientApp/package-lock.json index 5d51c4f28ae7..f3ed6b00c782 100644 --- a/src/ProjectTemplates/Web.Spa.ProjectTemplates/content/React-CSharp/ClientApp/package-lock.json +++ b/src/ProjectTemplates/Web.Spa.ProjectTemplates/content/React-CSharp/ClientApp/package-lock.json @@ -8016,9 +8016,9 @@ } }, "merge": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/merge/-/merge-1.2.1.tgz", - "integrity": "sha512-VjFo4P5Whtj4vsLzsYBu5ayHhoHJ0UqNm7ibvShmbmoz7tGi0vXaoJbGdB+GmDMLUdg8DpQXEIeVDAe8MaABvQ==" + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/merge/-/merge-2.1.0.tgz", + "integrity": "sha512-TcuhVDV+e6X457MQAm7xIb19rWhZuEDEho7RrwxMpQ/3GhD5sDlnP188gjQQuweXHy9igdke5oUtVOXX1X8Sxg==" }, "merge-deep": { "version": "3.0.2", diff --git a/src/ProjectTemplates/Web.Spa.ProjectTemplates/content/React-CSharp/ClientApp/package.json b/src/ProjectTemplates/Web.Spa.ProjectTemplates/content/React-CSharp/ClientApp/package.json index 1162586b611c..8e03f299ac03 100644 --- a/src/ProjectTemplates/Web.Spa.ProjectTemplates/content/React-CSharp/ClientApp/package.json +++ b/src/ProjectTemplates/Web.Spa.ProjectTemplates/content/React-CSharp/ClientApp/package.json @@ -5,7 +5,7 @@ "dependencies": { "bootstrap": "^4.1.3", "jquery": "^3.4.1", - "merge": "^1.2.1", + "merge": "^2.1.0", "oidc-client": "^1.9.0", "react": "^16.0.0", "react-dom": "^16.0.0",