From 5e94478387ca01a660b804dd35e76edbf5ea1ce1 Mon Sep 17 00:00:00 2001
From: Snyk bot <snyk-bot@snyk.io>
Date: Sat, 1 Aug 2020 12:37:19 +0100
Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities
(#1889)
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MARKED-584281
---
package.json | 2 +-
yarn.lock | 8 ++++----
2 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/package.json b/package.json
index 62ff78baa..e23b1a199 100644
--- a/package.json
+++ b/package.json
@@ -43,7 +43,7 @@
"kleur": "4.0.2",
"lodash": "4.17.19",
"lunr-mutable-indexes": "2.3.2",
- "marked": "0.8.2",
+ "marked": "1.1.1",
"mime": "2.4.6",
"minimatch": "3.0.4",
"mkdirp": "0.5.5",
diff --git a/yarn.lock b/yarn.lock
index 6a5f52204..f3b22f36d 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -6942,10 +6942,10 @@ marked@0.8.0:
resolved "https://registry.verdaccio.org/marked/-/marked-0.8.0.tgz#ec5c0c9b93878dc52dd54be8d0e524097bd81a99"
integrity sha512-MyUe+T/Pw4TZufHkzAfDj6HarCBWia2y27/bhuYkTaiUnfDYFnCP3KUN+9oM7Wi6JA2rymtVYbQu3spE0GCmxQ==
-marked@0.8.2:
- version "0.8.2"
- resolved "https://registry.verdaccio.org/marked/-/marked-0.8.2.tgz#4faad28d26ede351a7a1aaa5fec67915c869e355"
- integrity sha512-EGwzEeCcLniFX51DhTpmTom+dSA/MG/OBUDjnWtHbEnjAH180VzUeAw+oE4+Zv+CoYBWyRlYOTR0N8SO9R1PVw==
+marked@1.1.1:
+ version "1.1.1"
+ resolved "https://registry.yarnpkg.com/marked/-/marked-1.1.1.tgz#e5d61b69842210d5df57b05856e0c91572703e6a"
+ integrity sha512-mJzT8D2yPxoPh7h0UXkB+dBj4FykPJ2OIfxAWeIHrvoHDkFxukV/29QxoFQoPM6RLEwhIFdJpmKBlqVM3s2ZIw==
marked@1.1.1:
version "1.1.1"