vue-meta
vue-meta copied to clipboard
chore(deps): update devdependency lodash to v4.17.21 [security]
[!NOTE] Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to
mend[bot].This notice will be removed on 2025-10-07.
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| lodash (source) | 4.17.15 -> 4.17.21 |
GitHub Vulnerability Alerts
CVE-2021-23337
lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
CVE-2020-8203
Versions of lodash prior to 4.17.19 are vulnerable to Prototype Pollution. The functions pick, set, setWith, update, updateWith, and zipObjectDeep allow a malicious user to modify the prototype of Object if the property identifiers are user-supplied. Being affected by this issue requires manipulating objects based on user-provided property values or arrays.
This vulnerability causes the addition or modification of an existing property that will exist on all objects and may lead to Denial of Service or Code Execution under specific circumstances.
Release Notes
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- [ ] If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:
Project coverage is 98.68%. Comparing base (
96d8ce4) to head (2448c66).
Additional details and impacted files
@@ Coverage Diff @@
## master #834 +/- ##
=======================================
Coverage 98.68% 98.68%
=======================================
Files 33 33
Lines 687 687
Branches 212 212
=======================================
Hits 678 678
Misses 5 5
Partials 4 4
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
:rocket: New features to boost your workflow:
- :snowflake: Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
- :package: JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.