react-bootstrap-table2 icon indicating copy to clipboard operation
react-bootstrap-table2 copied to clipboard

Bump underscore from 1.9.1 to 1.13.1

Open mikeendale opened this issue 4 years ago • 4 comments

As mentioned in #1639, there is a high security vulnerability with dependent library - underscore < 1.12.1. Bumping it 1.13.1 will resolve the issue.

More on the CVE: https://www.npmjs.com/advisories/1674

mikeendale avatar Jul 15 '21 22:07 mikeendale

h/t @jbrody1

mikeendale avatar Jul 15 '21 22:07 mikeendale

Any updates on this?

tcboles avatar Nov 16 '21 16:11 tcboles

Any updates on it?

kirandeshmukh-startv avatar Apr 01 '22 12:04 kirandeshmukh-startv

Any updates on it?

anthian avatar Jun 27 '22 09:06 anthian