From f4bbed1342a8b5300233cfa5a88cd08742eef99d Mon Sep 17 00:00:00 2001 From: Rishabh Date: Fri, 30 Aug 2019 18:42:28 -0700 Subject: [PATCH] Updated loadsh dependency to 4.17.12 This updated version of 4.17.12 fixes a critical security vulnerability in lodash, more details are here: https://nvd.nist.gov/vuln/detail/CVE-2019-10744 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 00f3100..2d88071 100644 --- a/package.json +++ b/package.json @@ -50,7 +50,7 @@ "gulp-eslint": "~2.1.0", "gulp-istanbul": "~1.0.0", "gulp-mocha": "~2.2.0", - "lodash": "~4.13.1", + "lodash": "~4.17.12", "publish-please": "~2.1.4", "request": "^2.34.0", "rimraf": "~2.5.3",