We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
A recent vulnerability was found in older versions of lodash (the version that elm-webpack-loader seems to depend on). Result of npm audit:
lodash
elm-webpack-loader
npm audit
=== npm audit security report === ┌──────────────────────────────────────────────────────────────────────────────┐ │ Manual Review │ │ Some vulnerabilities require your attention to resolve │ │ │ │ Visit https://go.npm.me/audit-guide for additional guidance │ └──────────────────────────────────────────────────────────────────────────────┘ ┌───────────────┬──────────────────────────────────────────────────────────────┐ │ Moderate │ Prototype Pollution │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ lodash │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Patched in │ >=4.17.11 │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Dependency of │ elm-webpack-loader [dev] │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Path │ elm-webpack-loader > node-elm-compiler > │ │ │ find-elm-dependencies > lodash │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ More info │ https://nodesecurity.io/advisories/782 │ └───────────────┴──────────────────────────────────────────────────────────────┘ ┌───────────────┬──────────────────────────────────────────────────────────────┐ │ Moderate │ Prototype Pollution │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ lodash │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Patched in │ >=4.17.11 │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Dependency of │ elm-webpack-loader [dev] │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Path │ elm-webpack-loader > node-elm-compiler > lodash │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ More info │ https://nodesecurity.io/advisories/782 │ └───────────────┴──────────────────────────────────────────────────────────────┘ found 2 moderate severity vulnerabilities in 23118 scanned packages 2 vulnerabilities require manual review. See the full report for details.
The text was updated successfully, but these errors were encountered:
fixed in #93
Sorry, something went wrong.
Closing this given #93 contains the fix
No branches or pull requests
A recent vulnerability was found in older versions of
lodash
(the version thatelm-webpack-loader
seems to depend on). Result ofnpm audit
:The text was updated successfully, but these errors were encountered: