From 26b0536dd18713fdba058f21ec466d05b20ace85 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 22 Jun 2022 23:41:50 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NEXTAUTH-2933545 --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index a0668ce..fb3f925 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "luxon": "^2.4.0", "next": "11.1.4", "next-absolute-url": "^1.2.2", - "next-auth": "^4.3.4", + "next-auth": "^4.5.0", "react": "17.0.2", "react-css-collapse": "^4.1.0", "react-dom": "17.0.2", diff --git a/yarn.lock b/yarn.lock index bd5cc87..249ce9a 100644 --- a/yarn.lock +++ b/yarn.lock @@ -6181,10 +6181,10 @@ next-absolute-url@^1.2.2: resolved "https://registry.yarnpkg.com/next-absolute-url/-/next-absolute-url-1.2.2.tgz#9aba5adcee8effcffd63271d99e13213ad04c23b" integrity sha512-Z2+LZXQTthhw2je9u4eq8QWXxXd57a6b54x9exBfQX4Dct6YxaMjcXZWNLHd9AOlCue84EsMpdSGP7wACqUnPg== -next-auth@^4.3.4: - version "4.3.4" - resolved "https://registry.yarnpkg.com/next-auth/-/next-auth-4.3.4.tgz#7b241e34e1f68632768cef8ee289e33256cb2b19" - integrity sha512-8dGkNicbxY2BYsJq4uOJIEsGt39wXj5AViTBsVfbRQqtAFmZmXYHutf90VBmobm8rT2+Xl60HDUTkuVVK+x+xw== +next-auth@^4.5.0: + version "4.5.0" + resolved "https://registry.yarnpkg.com/next-auth/-/next-auth-4.5.0.tgz#2df57287fddc705b8971c88c60bad44a89ac6dd1" + integrity sha512-B6gYRIbqtj8nlDsx3y2Ruwp/mvZnItPs7VUULY43QYw+M9xtDPIM9EBZ3ryd/wNYA3MDteBJlzGm/ivseXcmJA== dependencies: "@babel/runtime" "^7.16.3" "@panva/hkdf" "^1.0.1"