search

callumlocke / grunt-cdnify

Grunt plugin for finding and modifying static resource URLs
61 stars 40 forks source link

NPM Audit error/ security issue #41

Open strider72 opened 4 years ago

strider72 commented 4 years ago

When I run npm audit, this throws multiple "prototype pollution" errors due to a dependency on an old version of "lodash". Any chance of updating the dependency to fix this security issue?

strider72 commented 4 years ago

Specifically, cdnify requires soup, which requires an ancient version of cheerio, which in turn requires an obsolete version of lodash, which has multiple known security issues. I see you're the guy who made "soup" as well, so... two birds, one stone? :-D