Skip to content

[Snyk] Upgrade lodash from 4.17.5 to 4.17.21 - #3

Open
pushkar1923 wants to merge 1 commit into
masterfrom
snyk-upgrade-b78eebccf8d29d282d72c690aabc5827
Open

[Snyk] Upgrade lodash from 4.17.5 to 4.17.21#3
pushkar1923 wants to merge 1 commit into
masterfrom
snyk-upgrade-b78eebccf8d29d282d72c690aabc5827

Conversation

@pushkar1923

Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to upgrade lodash from 4.17.5 to 4.17.21.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 13 versions ahead of your current version.

  • The recommended version was released 5 years ago.

Issues fixed by the recommended upgrade:

IssueScoreExploit Maturity
high severityImproper Input Validation
SNYK-JS-URLPARSE-543307
372Proof of Concept
high severityOpen Redirect
npm:url-parse:20180731
372Mature
high severityPrototype Override
npm:querystringify:20180419
372No Known Exploit
high severityPrototype Pollution
SNYK-JS-AJV-584908
372No Known Exploit
high severityUninitialized Memory Exposure
SNYK-JS-BL-608877
372Proof of Concept
high severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-ES5EXT-6095076
372Proof of Concept
high severityArbitrary Code Execution
SNYK-JS-JSYAML-174129
372No Known Exploit
high severityCode Injection
SNYK-JS-LODASH-1040724
372Proof of Concept
high severityPrototype Pollution
SNYK-JS-LODASH-450202
372Proof of Concept
high severityPrototype Pollution
SNYK-JS-LODASH-567746
372Proof of Concept
high severityPrototype Pollution
SNYK-JS-LODASH-608086
372Proof of Concept
high severityPrototype Pollution
SNYK-JS-LODASH-6139239
372Proof of Concept
high severityPrototype Pollution
SNYK-JS-LODASH-73638
372Proof of Concept
high severityDirectory Traversal
SNYK-JS-MOMENT-2440688
372No Known Exploit
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067
372Proof of Concept
medium severityArbitrary Code Injection
SNYK-JS-UNDERSCORE-1080984
372Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835
372Proof of Concept
medium severityPrototype Pollution
SNYK-JS-JQUERY-174006
372Mature
medium severityCross-site Scripting (XSS)
SNYK-JS-JQUERY-565129
372Mature
medium severityCross-site Scripting (XSS)
SNYK-JS-JQUERY-567880
372Mature
medium severityDenial of Service (DoS)
SNYK-JS-JSYAML-173999
372No Known Exploit
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905
372Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-73639
372Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818
372No Known Exploit
medium severityInformation Exposure
SNYK-JS-NODEFETCH-2342118
372No Known Exploit
medium severityDenial of Service
SNYK-JS-NODEFETCH-674311
372No Known Exploit
low severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073
372Proof of Concept
low severityRegular Expression Denial of Service (ReDoS)
npm:moment:20170905
372No Known Exploit
Release notes
Package name: lodash
  • 4.17.21 - 2021-02-20

    Bump to v4.17.21

  • 4.17.20 - 2020-08-13

    Bump to v4.17.20.

  • 4.17.19 - 2020-07-08

    Bump to v4.17.19

  • 4.17.18 - 2020-07-08
  • 4.17.17 - 2020-07-08
  • 4.17.16 - 2020-07-08

    Rebuild lodash and docs

  • 4.17.15 - 2019-07-19

    4.17.15

  • 4.17.14 - 2019-07-10
  • 4.17.13 - 2019-07-09
  • 4.17.12 - 2019-07-09
  • 4.17.11 - 2018-09-12
  • 4.17.10 - 2018-04-24
  • 4.17.9 - 2018-04-24
  • 4.17.5 - 2018-02-04
from lodash GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade lodash from 4.17.5 to 4.17.21.
See this package in npm:
lodash
See this project in Snyk:
https://app.snyk.io/org/pushkar.choupane/project/1e4b36a8-f5bd-4cb0-86fc-fcc1029ff54d?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@pushkar1923@snyk-bot