From fa49d8e83d7af0c10bc5f34be717b1cfe64b83ff Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 15 Apr 2024 18:50:28 +0000
Subject: [PATCH] fix: server/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-6139239
---
 server/package.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/server/package.json b/server/package.json
index 3d3e8de..1f351e0 100644
--- a/server/package.json
+++ b/server/package.json
@@ -70,13 +70,13 @@
     "@project-sunbird/telemetry-sdk": "^0.0.7",
     "axios": "^0.18.0",
     "continuation-local-storage": "^3.2.1",
-    "elasticsearch": "^14.1.0",
+    "elasticsearch": "^16.7.3",
     "express": "^4.16.2",
     "express-cassandra": "^2.2.2",
     "glob": "^7.1.2",
     "hashids": "^1.1.4",
     "keycloak-connect": "^4.0.0-beta.2",
-    "lodash": "^4.17.5",
+    "lodash": "^4.17.17",
     "log4js": "^3.0.6",
     "mitt": "^1.1.3",
     "nano": "^8.0.0",