Upgrade to async 2.6.3 to fix upstream vulnerability in lodash

jrit / web-resource-inliner

Inlines img, script and link tags into the same file

MIT License

66 stars 29 forks source link

Upgrade to async 2.6.3 to fix upstream vulnerability in lodash #47

Closed pastelmind closed 5 years ago

pastelmind commented 5 years ago

There is a new vulnerability in lodash 4.17.11 (This issue may be related), and async 2.6.3 fixes it by upgrading to 4.17.13. Seeing as web-resource-inliner is a dependent of async, could you please upgrade too?