Minor vulnerability in lodash

[fendy-g]

Currently referencing lodash 4.17.15, which has a prototype pollution. It has been patched in >=4.17.19.

[beeryt]

I just noticed this as well. Looks like it was picked up by dependabot in #754

[jshemas]

More info: https://www.npmjs.com/advisories/1523

[dlarr]

So, is this going to be fixed ? Just adding the ^ in the package.json should do the trick.

"lodash": "^4.17.15"

[mohanraj-r]

Can we have a release with #754 please

[fchenTelus]

+1 ^

[dmwelch]

#763

[jimmyandrade]

@fendy-g this fix was included in version 4.1.3 by #766 🎉

The release is available on:

npm package (@latest dist-tag)
GitHub release

Could we close it?