Upgraded the lodash version to fix Prototype Pollution vulnerability (C…

…VE-2019-10744) (#98) * Upgraded the lodash version to fix Prototype Pollution vulnerability (CVE-2019-10744) https://app.snyk.io/vuln/SNYK-JS-LODASH-450202 * Added package-lock.json * Fixed the order of loads in dependencies section of package.json. It is in alphabetical order now.
AndrewKeig · Aug 1, 2019 · 38e31a6 · 38e31a6
1 parent 6d193aa
commit 38e31a6
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 7 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -16,7 +16,7 @@
   },
   "dependencies": {
     "@types/joi": "^13.0.5",
-    "lodash": "^4.9.0"
+    "lodash": "^4.17.15"
   },
   "peerDependencies": {
     "joi": "*"