Skip to content

Commit f4851a5

Browse files
committed
Updates lodash to 4.17.14 to address security vulnerability
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.14. **This update includes security fixes.** <details> <summary>Vulnerabilities fixed</summary> *Sourced from The GitHub Security Advisory Database.* > **High severity vulnerability that affects lodash, lodash-es, lodash-amd, lodash.template, lodash.merge, lodash.mergewith, and lodash.defaultsdeep** > Affected versions of lodash are vulnerable to Prototype Pollution. > The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload. > > Affected versions: < 4.17.13 </details> <details> <summary>Commits</summary> - [`be87d30`](lodash/lodash@be87d30) Bump to v4.17.14. - [`a6fe6b1`](lodash/lodash@a6fe6b1) Rebuild lodash and docs. - [`e371828`](lodash/lodash@e371828) Bump to v4.17.13. - [`357e899`](lodash/lodash@357e899) Rebuild lodash and docs. - [`fd9a062`](lodash/lodash@fd9a062) Bump to v4.17.12. - [`e77d681`](lodash/lodash@e77d681) Rebuild lodash and docs. - [`629d186`](lodash/lodash@629d186) Update OpenJS references. - [`2406eac`](lodash/lodash@2406eac) Fix minified build. - [`17a34bc`](lodash/lodash@17a34bc) Fix test bootstrap for core build. - [`53838a3`](lodash/lodash@53838a3) Fix tests in older browsers. - Additional commits viewable in [compare view](lodash/lodash@4.17.11...4.17.14) </details> <br />
1 parent a767640 commit f4851a5

File tree

2 files changed

+35
-16
lines changed

2 files changed

+35
-16
lines changed

package-lock.json

+34-15
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818
"url": "https://github.com/arabold/aws-to-slack.git"
1919
},
2020
"dependencies": {
21-
"lodash": "^4.17.11"
21+
"lodash": "^4.17.14"
2222
},
2323
"devDependencies": {
2424
"aws-sdk": "^2.463.0",

0 commit comments

Comments
 (0)