search

grofers / redux-cookies-middleware

redux-cookies-middleware is a Redux middleware which syncs a subset of your Redux store state with cookies.
MIT License
81 stars 16 forks source link

[Snyk] Upgrade lodash from 4.17.15 to 4.17.20 #57

Open snyk-bot opened 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to upgrade lodash from 4.17.15 to 4.17.20.

merge advice :sparkles: Snyk has automatically assigned this pull request, set who gets assigned.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-LODASH-608086		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-590103		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-LODASH-567746		 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

coveralls commented 3 years ago

Coverage Status

Coverage remained the same at 94.483% when pulling 80ad430337fb2c770c266b78bbe125fa31bf50c5 on snyk-upgrade-c609f74c5847366de26a9426412938cb into 9e9b70b1c2839069c4363bab812c8c17db721cb8 on master.