lodash / babel-plugin-lodash

Modular Lodash builds without the hassle.
Other
1.96k stars 91 forks source link

Update package.json #241

Open RamyaPayyavula opened 3 years ago

RamyaPayyavula commented 3 years ago

older versions of lodash has vulnerabilities. lodash is vulnerable to injection vulnerability. An attacker can inject malicious code via sourceURL since it is not sanitized for the user-provided code that leads to the eval() function.

jsf-clabot commented 3 years ago

CLA assistant check
Thank you for your submission, we really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.

falsyvalues commented 3 years ago

Hi @RamyaPayyavula!

See #240 😃