From c0a87e1cb489170b474186c46e01de6f6a496f89 Mon Sep 17 00:00:00 2001 From: Ilkka Laukkanen Date: Thu, 19 Jan 2017 11:31:55 +0200 Subject: [PATCH] Bump moment.js version to mitigate regexp DoS According to auditjs versions < 2.15.2 are vulnerable: https://snyk.io/vuln/npm:moment:20161019 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 68950de5..d25a1e30 100644 --- a/package.json +++ b/package.json @@ -32,7 +32,7 @@ "chalk": "0.5.1", "commander": "2.6.0", "lodash": "^4.5.1", - "moment": "^2.11.2", + "moment": "^2.17.1", "rx": "2.3.24", "spawn-default-shell": "^1.1.0", "tree-kill": "^1.1.0"