Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

severity vulnerabilities with lodash from plugin-warn-if-update-available #344

Open
sensOperations opened this issue Jun 27, 2024 · 1 comment

Comments

@sensOperations
Copy link

Hey!

Here is a screenshot, when I run npm audit:
image

It seems like, there should be done some updates to a package.
This is the part of my package.json:
"devDependencies": {"dotenv-vault": "^1.26.2"},

Can you reproduce that issue, because it appeared to two different projects on two different pcs?
Let me know, if you need further infos.

@seanblonien
Copy link

I imagine this is a very easy patch for dotenv-vault, could we get this in a patch release?

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants