From 55194c106e25c18b9671ffda5096cc8b9d35ff1a Mon Sep 17 00:00:00 2001 From: Gregor Martynus <39992+gr2m@users.noreply.github.com> Date: Wed, 12 May 2021 11:37:06 -0700 Subject: [PATCH] fix: bump minimal version of lodash to address `CVE-2021-23337` (#1931) --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 41017b1eb3..d7cabe3897 100644 --- a/package.json +++ b/package.json @@ -36,7 +36,7 @@ "git-log-parser": "^1.2.0", "hook-std": "^2.0.0", "hosted-git-info": "^4.0.0", - "lodash": "^4.17.15", + "lodash": "^4.17.21", "marked": "^2.0.0", "marked-terminal": "^4.1.1", "micromatch": "^4.0.2",