https://npmjs.com/advisories/782

[GrosSacASac]

Bug Report

Current Behavior

  Moderate        Prototype Pollution                                           
                                                                                
  Package         lodash                                                        
                                                                                
  Dependency of   @babel/preset-env [dev]                                       
                                                                                
  Path            @babel/preset-env > @babel/plugin-transform-unicode-regex >   
                  @babel/helper-regex > lodash                                  

More info https://npmjs.com/advisories/782

Input Code

npm i @babel/preset-env@7.4.2
npm audit

Expected behavior/code

[babel-bot]

Hey @GrosSacASac! We really appreciate you taking the time to report an issue. The collaborators
on this project attempt to help as many people as possible, but we're a limited number of volunteers,
so it's possible this won't be addressed swiftly.

If you need any help, or just have general Babel or JavaScript questions, we have a vibrant Slack
community that typically always has someone willing to help. You can sign-up here
for an invite.

[danez]

Thanks for reporting.

We actually already did update lodash, but it seems it never got released.

We will investigate.