Skip to content
This repository has been archived by the owner on Mar 13, 2022. It is now read-only.

Update feathers-vuex to 2.x.x #4

Open
nothingismagick opened this issue May 2, 2019 · 1 comment
Open

Update feathers-vuex to 2.x.x #4

nothingismagick opened this issue May 2, 2019 · 1 comment

Comments

@nothingismagick
Copy link
Contributor

Previously in 1.x.x lodash.merge was being used. There are issues with that that have since been resolved. Please see:

feathersjs-ecosystem/feathers-vuex#213

✗ Medium severity vulnerability found in lodash.merge
  Description: Prototype Pollution
  Info: https://snyk.io/vuln/SNYK-JS-LODASHMERGE-173733
  Introduced through: feathers-vuex@1.7.0
  From: feathers-vuex@1.7.0 > lodash.merge@4.6.1

✗ High severity vulnerability found in lodash.merge
  Description: Prototype Pollution
  Info: https://snyk.io/vuln/SNYK-JS-LODASHMERGE-173732
  Introduced through: feathers-vuex@1.7.0
  From: feathers-vuex@1.7.0 > lodash.merge@4.6.1
@nothingismagick
Copy link
Contributor Author

Latest at the time of this writing is v2.0.0-pre.24
https://github.com/feathers-plus/feathers-vuex/releases

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant