union-value

union-value copied to clipboard

fix: lodash CVE-2021-41720, ansi-regex CVE-2021-3807, set-value CVE-2…

2

- lodash CVE-2021-41720 - ansi-regex CVE-2021-3807 - set-value CVE-021-23440

nmccready

update dep, move to ESM and require node 12.20

3

closes #8 closes #7

jimmywarting

Fix: Upgrading Vulnerable set-value Package

8

Updating set-value version from 3.0.0 to 4.1.0 since the v3 has a security vulnerability. [CVE-2021-23440](https://github.com/advisories/GHSA-4jqc-8m5r-9rpr)

loChris

"set-value": "^2.0.1" dependency is reported as vulnerable

1

See https://github.com/shlomif/fc-solve/security/dependabot/fc-solve/site/wml/package-lock.json/set-value/open - fixed in set-value-v4.0.1

shlomif

Fix security vulnerability by upgrading lib

5

Fixes CVE-2019-10747: - https://nvd.nist.gov/vuln/detail/CVE-2019-10747

dchambers

See: https://github.com/jonschlinkert/mixin-deep/issues/6

jonschlinkert