Skip to content

Update lodash to resolve moderate-severity vulnerabilities#254

Merged
kriszyp merged 1 commit intomainfrom
update-lodash
Mar 18, 2026
Merged

Update lodash to resolve moderate-severity vulnerabilities#254
kriszyp merged 1 commit intomainfrom
update-lodash

Conversation

@cb1kenobi
Copy link
Copy Markdown
Contributor

@cb1kenobi cb1kenobi commented Mar 18, 2026

lodash 4.0.0 - 4.17.21 have a moderate severity vulnerability:

  • Lodash has Prototype Pollution Vulnerability in _.unset and _.omit functions - GHSA-xxjr-mmjv-4gpg

@cb1kenobi cb1kenobi requested a review from a team as a code owner March 18, 2026 19:25
@socket-security
Copy link
Copy Markdown

socket-security Bot commented Mar 18, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedlodash@​4.17.21 ⏵ 4.17.2376 +1100 +287 +186100

View full report

@kriszyp kriszyp merged commit e9ec3cd into main Mar 18, 2026
21 of 22 checks passed
@kriszyp kriszyp deleted the update-lodash branch March 18, 2026 21:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kriszyp kriszyp kriszyp approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@cb1kenobi @kriszyp