search

fkling / JSNetworkX

Build, process and analyze graphs in JavaScript (port of NetworkX)
https://felix-kling.de/jsnetworkx/
Other
757 stars 185 forks source link

Lodash 3.10.1 in dependencies has a security issue #79

Open benoitguigal opened 5 years ago

benoitguigal commented 5 years ago

(https://nvd.nist.gov/vuln/detail/CVE-2018-3721)[https://nvd.nist.gov/vuln/detail/CVE-2018-3721] Please update to version > 4.17.5

joshribakoff-sm commented 2 months ago

I don't think the security issue is really that much of a "security" issue, but I will say that this would be good to fix because this project cannot [easily] be used in a project that is using Lodash v4, it gives a bunch of errors like: Module not found: Error: Can't resolve 'lodash/collection/shuffle'