Prob: lodash v3 is vulnerable.

ifandelse / machina.js

js ex machina - finite state machines in JavaScript

http://machina-js.org/

Other

1.93k stars 147 forks source link

Prob: lodash v3 is vulnerable. #159

Closed tristanls closed 5 years ago

tristanls commented 6 years ago

Solv: Upgraded to lodash v4.

mostafabarmshory commented 6 years ago

@tristanls Why it is not accepted to merge with the master?

tristanls commented 6 years ago

@mostafabarmshory ¯\(ツ)/¯ ... there weren't that many changes. If you make the changes you can roll-your-own version that's patched. I've been running a patched version in production since this pull request.

bompi88 commented 5 years ago

@ifandelse any progress on this?