Security Vulnerability in ancient lodash

[angelol]

This package uses an ancient version of lodash that has security vulnerability:

https://hackerone.com/reports/380873

Please upgrade to lodash 4.17.11 immediately.

[gabegorelick]

Still an issue. Lodash dev recommends using lodash package directly rather than the sub-packages. See lodash/lodash#4193 (comment).

[ceastman-ibm]

@beaugunderson any update?

[beaugunderson]

fixed in 5.9.1, thank you all for your patience 🙏