From 201995eb90862d16bcf27a0328bfa1a7b85cbed4 Mon Sep 17 00:00:00 2001 From: Jonas Hermsmeier Date: Wed, 30 May 2018 13:17:20 +0200 Subject: [PATCH] upgrade(package): Update lodash to 4.17.10 This updates `lodash` to mitigate a prototype pollution vulnerability. See https://nodesecurity.io/advisories/577 Change-Type: patch --- npm-shrinkwrap.json | 4 ++-- package.json | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/npm-shrinkwrap.json b/npm-shrinkwrap.json index 9b41e5cc..8be4af7e 100644 --- a/npm-shrinkwrap.json +++ b/npm-shrinkwrap.json @@ -5010,8 +5010,8 @@ } }, "lodash": { - "version": "4.13.1", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.13.1.tgz" + "version": "4.17.10", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.10.tgz" }, "lodash-deep": { "version": "2.0.0", diff --git a/package.json b/package.json index e34fb537..fa0bde8e 100644 --- a/package.json +++ b/package.json @@ -65,7 +65,7 @@ "gpt": "1.0.0", "immutable": "3.8.1", "inactivity-timer": "1.0.0", - "lodash": "4.13.1", + "lodash": "4.17.10", "lzma-native": "1.5.2", "mbr": "1.1.2", "mime-types": "2.1.15",