Update lodash dependency (see CVE-2020-8203)

babel / minify

:scissors: An ES6+ aware minifier based on the Babel toolchain (beta)

https://babeljs.io/repl

MIT License

4.39k stars 225 forks source link

Update lodash dependency (see CVE-2020-8203) #996

Open felixhix opened 4 years ago

felixhix commented 4 years ago

Current used version in babel-plugin-minify-dead-code-elimination and babel-preset-minifyis 4.17.11. Please refer to https://nvd.nist.gov/vuln/detail/CVE-2020-8203 and update to 4.17.20 (latest).