From 081a2d77785709dde3f4f0155468a0534cf6cc82 Mon Sep 17 00:00:00 2001 From: Gregor Martynus <39992+gr2m@users.noreply.github.com> Date: Wed, 12 May 2021 11:06:53 -0700 Subject: [PATCH] fix: bump minimal version of lodash to address `CVE-2021-23337` https://github.com/advisories/GHSA-35jh-r3h4-6jhm fixes #1930 thanks @ gnanderson --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 41017b1eb3..d7cabe3897 100644 --- a/package.json +++ b/package.json @@ -36,7 +36,7 @@ "git-log-parser": "^1.2.0", "hook-std": "^2.0.0", "hosted-git-info": "^4.0.0", - "lodash": "^4.17.15", + "lodash": "^4.17.21", "marked": "^2.0.0", "marked-terminal": "^4.1.1", "micromatch": "^4.0.2",