Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

[Security] Update lodash #20

Closed
wants to merge 1 commit into from
Closed

[Security] Update lodash #20

wants to merge 1 commit into from

Conversation

daniel-nagy
Copy link

@daniel-nagy daniel-nagy commented Jul 13, 2019 •
edited
Loading

Update lodash to patch prototype pollution vulnerability. This makes #19 obsolete.

@coveralls
Copy link

Coverage Status

Coverage remained the same at 100.0% when pulling 2cdea90 on daniel-nagy:master into 7c4f307 on request:master.

@quetzaluz quetzaluz mentioned this pull request Jul 19, 2019
Closed
@LRNZ09
Copy link

LRNZ09 commented Jul 31, 2019

Please merge this one!
https://www.npmjs.com/advisories/1065

@analog-nico
Copy link
Member

I just bumped it to ^4.17.15 and will roll it out to the main request-promise packages shortly.

@analog-nico analog-nico closed this Nov 3, 2019
# for free to join this conversation on GitHub. Already have an account? # to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@daniel-nagy @coveralls @LRNZ09 @analog-nico