microsoft / Recognizers-Text

Microsoft.Recognizers.Text provides recognition and resolution of numbers, units, date/time, etc. in multiple languages (ZH, EN, FR, ES, PT, DE, IT, TR, HI, NL. Partial support for JA, KO, AR, SV). Packages available at: https://www.nuget.org/profiles/Recognizers.Text, https://www.npmjs.com/~recognizers.text
MIT License
1.66k stars 429 forks source link

Replace lodash.trimend import by lodash v4.17.21 #3122

Closed ceciliaavila closed 1 year ago

ceciliaavila commented 1 year ago

Describe the bug According to CVE-2020-28500, the lodash.trimend package should be updated to version 4.17.21, but the latest released version of this package is 4.5.1. Individual imports of lodash's modules should be replaced by importing lodash version 4.17.21 to avoid security alerts.

Expected behavior The build of a project using JS recognizers-text packages should be free of security alerts.

Platform (please complete the following information):