Prototype Pollution in lodash versions <=4.7.11

Netflix / nerror

nerror: rich JavaScript errors

MIT License

122 stars 14 forks source link

Prototype Pollution in lodash versions <=4.7.11 #8

Open VinodhiniV opened 5 years ago

VinodhiniV commented 5 years ago

As there s a vulnerability in the lodash version used by Netflix/nerror, could you please help us by updating to latest version of lodash.

We are blocked due to this vulnerability in lodash version.

Thanks

richardaum commented 1 year ago

Actually, the lodash version used here is ^4.17.15, which means 4.17.x. This way this range reaches the current latest version of lodash. Probably, your lock file is outdated, try to update your lock file.

This issue should be closed.