react-infinite-grid icon indicating copy to clipboard operation
react-infinite-grid copied to clipboard

Published 20 hours ago • verified publisher icon ggordan

Lodash needs to be updated to fix security vulnerabilites

Open samgermain opened this issue 3 years ago • 0 comments

Just installed, and received a few notifications about security vulnerabilites like

  High            Prototype Pollution                                           

  Package         lodash                                                        

  Patched in      >=4.17.12                                                     

  Dependency of   react-infinite-grid                                           

  Path            react-infinite-grid > lodash                                  

  More info       https://npmjs.com/advisories/1065

I think updating lodash with npm install lodash@latest fixes them all

samgermain avatar Mar 19 '21 21:03 samgermain