Skip to content

lodash vulnerable to Code Injection via _.template imports key names - https://github.com/advisories/GHSA-r5fr-rjxr-66jc #61

@BaseMax

Description

@BaseMax

https://github.com/metropolis-retro/metropolis-retro.github.io/actions/runs/23985032073/job/69955496865?pr=60

run bun-audit............................................................Failed
- hook id: bun-audit
- exit code: 1

  lodash  >=4.0.0 <=4.17.23
    recharts › lodash
    high: lodash vulnerable to Code Injection via `_.template` imports key names - https://github.com/advisories/GHSA-r5fr-rjxr-66jc

  1 vulnerabilities (1 high)

  To update all dependencies to the latest compatible versions:
    bun update

  To update all dependencies to the latest versions (including breaking changes):
    bun update --latest

  bun audit v1.3.11 (af24e281)

Metadata

Metadata

Assignees

No one assigned

    Labels

    help wantedExtra attention is needed

    Type

    Projects

    Status

    Backlog

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions