Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[[FIX]] Update Lodash to latest 4.17.19 (jshint#3494)
Address vulnerability of type "Prototype Pollution in lodash" GHSA-p6mc-m468-83gw It is not sure whether this is at all relevant for jshint, but at the moment, GitHub's Dependabot sends vulnerability alerts to all respositories with a dependency to jshint, e.g. https://github.com/alexandrainst/node-red-contrib-parser-ini/network/alert/package-lock.json/lodash/open So it would be nice to issue a new jshint release ASAP to offer an easy way forward for those projects with a (dev) dependency to jshint. https://github.com/lodash/lodash/wiki/Changelog
- Loading branch information