grunt-update-json
grunt-update-json copied to clipboard
Prototype Pollution on lodash
Hi there
We're gladly using grunt-update-json on many of our products.
You're using lodash version ~2.x. It contains the vulnerability "prototype pollution", which is fixed in lodash version >= 4.17.12.
Therefore we recommend and kindly ask you to update your dependencies!
Thanks a lot in advance and stay healthy!
Greetings Corina