Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

lodash security patch needed #73

Open
UlisesGascon opened this issue Oct 19, 2018 · 3 comments
Open

lodash security patch needed #73

UlisesGascon opened this issue Oct 19, 2018 · 3 comments
Assignees
@UlisesGascon @CodingCarlos @Sediug
Labels
bug

Comments

@UlisesGascon
Copy link
Collaborator

We need to upgrade the dependency to version >=4.17.5, based on this issue

@Sediug I can manage the change if you want in few days...
@CodingCarlos
Copy link
Member

I'm on it!

@CodingCarlos
Copy link
Member

CodingCarlos commented Nov 6, 2018 •
edited
Loading

Well... By checking this out in depth, I've seen that there are more vulnerabilities to solve (some of them classified as critical), so I'm creating a branch to avoid potential risks.

To know more, run npm audit and see the inform.

@CodingCarlos CodingCarlos mentioned this issue Nov 6, 2018
Merged
@CodingCarlos
Copy link
Member

Ok, ready PR #74 to merge. Please, somebody to also check out that I'm not breaking things with new dependencies' versions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@UlisesGascon UlisesGascon

@CodingCarlos CodingCarlos

@Sediug Sediug

Labels
bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@UlisesGascon @CodingCarlos @Sediug