[Snyk] Fix for 1 vulnerabilities

[mike-goodwin]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LODASH-6139239	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: promise-fs

The new version differs by 4 commits.

• f5e6d23 Bump version: 2.1.0 -> 2.1.1
• 4fbd715 Bump deps.
• 8dd88b5 Fix package.json
• 863ed5a Bump deps.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

[guardrails[bot]]

:warning: We detected 2 security issues in this pull request:

Vulnerable Libraries (2)

Severity	Details
Medium	pkg:npm/[email protected] upgrade to: 5.6.5,2.5.3,1.1064.0,2.31.3,2.16.2,1.24.2,1.1.6,3.24.5
Medium	pkg:npm/[email protected] upgrade to: 4.17.21

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.