appirio-tech / tc-core-library-js

6 stars 9 forks source link

Security vulnerabilities #23

Open sharathkumaranbu opened 5 years ago

sharathkumaranbu commented 5 years ago

There is a security vulnerability in the lodash version used by this library. Please fix it. The vulnerabilities are being propagated to all APIs and processors which uses this library.

sharathkumaranbu commented 4 years ago

@cwdcwd Please check this.

sharathkumaranbu commented 4 years ago

Fixed in https://github.com/appirio-tech/tc-core-library-js/tree/v2.6.4

rootelement commented 4 years ago

@sachin-maheshwari we should really make 2.6.4 tag the primary on this because it does take care of a lot of audit errors with lodash. I'm using the 2.6.4 tag in all the v5 challenge api stuff and have had no issues.