BUG: Lodash vulnerability

[rosston]

Description

Lodash has a vulnerability in versions 4.0.0-4.17.22: https://nvd.nist.gov/vuln/detail/CVE-2025-13465

Because this repo uses exact version specifiers for its dependencies, this Lodash version is marked as a vulnerability in all packages that have installed @onebeyond/license-checker.

npm audit in this repository also shows this vulnerability:

lodash  4.0.0 - 4.17.21
Severity: moderate
Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions - https://github.com/advisories/GHSA-xxjr-mmjv-4gpg
fix available via `npm audit fix --force`
Will install lodash@4.17.23, which is outside the stated dependency range
node_modules/lodash

Possible Fix

Upgrade Lodash to 4.17.23