Dependency on elasticsearch@14.0.0 security vulnerability

jbdemonte / mongoose-elasticsearch-xp

A mongoose plugin that indexes models into Elasticsearch 2 / 5 / 6 and 7

93 stars 34 forks source link

Dependency on elasticsearch@14.0.0 security vulnerability #48

Open SaltyQuetzals opened 5 years ago

SaltyQuetzals commented 5 years ago

Hi!

I was just using this library for a school project and I found that your library's dependency on elasticsearch@14.0.0 creates a security vulnerability, as elasticsearch@14.0.0 relies on an outdated version of lodash.

Figured you'd want to know!