Lodash Security Vulnerability

forwardemail / email-templates

Create, preview (browser/iOS Simulator), and send custom email templates for Node.js. Made for @forwardemail, @ladjs, @cabinjs, @spamscanner, and @breejs.

https://forwardemail.net/docs/send-emails-with-node-js-javascript

MIT License

3.66k stars 339 forks source link

Lodash Security Vulnerability #370

Closed JonathanJamesRasmussen closed 5 years ago

JonathanJamesRasmussen commented 5 years ago

There is a high-severity security bug in Lodash that was recently published:

https://github.com/lodash/lodash/pull/4336

It appears as though this tool isn't updated to use this patch yet.

niftylettuce commented 5 years ago

TBH anyone that is affected by this has poor architecture and a poor sense of security. PR is welcome. I occasionally version bump deps.

JonathanJamesRasmussen commented 5 years ago

Thanks for clarifying. I was going based on a GitHub security alert, but after running NPM audit, it seems to be a non-issue.