search

klei / grunt-injector

Inject references to files into other files (think scripts and stylesheets into an html file)
MIT License
106 stars 38 forks source link

Update lodash dependency as currently used one has a vunerability #55

Open snarf-snarf-snarf opened 3 years ago

snarf-snarf-snarf commented 3 years ago

The verison of the lodash dependency in package.json should be updated to fix the following vunerability:

lodash <=4.17.20 Severity: high Prototype Pollution - https://npmjs.com/advisories/1065 Prototype Pollution - https://npmjs.com/advisories/1523 Command Injection - https://npmjs.com/advisories/1673 Prototype Pollution - https://npmjs.com/advisories/577 Prototype Pollution - https://npmjs.com/advisories/782