Skip to content

Commit

Permalink
[[CHORE]] Update dependency to fix vulnerability
Browse files Browse the repository at this point in the history
Lodash version 4.17.10 is vulnerable to prototype pollution [1]. Update
to version 4.17.11 which includes a fix and which otherwise does not
effect JSHint's behavior [2].

[1] https://www.npmjs.com/advisories/782
[2] https://github.com/lodash/lodash/wiki/Changelog#v41711
  • Loading branch information
jugglinmike committed Feb 23, 2019
1 parent d697ff4 commit d73467a
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion package.json
Expand Up @@ -43,7 +43,7 @@
"console-browserify": "1.1.x",
"exit": "0.1.x",
"htmlparser2": "3.8.x",
"lodash": "~4.17.10",
"lodash": "~4.17.11",
"minimatch": "~3.0.2",
"shelljs": "0.3.x",
"strip-json-comments": "1.0.x"
Expand Down

0 comments on commit d73467a

Please sign in to comment.