kodev-org
/
vikunja
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(deps): update lodash to 4.18.1 

Fixes code injection via _.template (Dependabot #176, #178) and
prototype pollution via _.unset/_.omit (Dependabot #175, #177).
This commit is contained in:
kolaente 2026-04-07 15:38:52 +02:00
parent f40eddd4e3
commit efc9b41349
No known key found for this signature in database
GPG Key ID: F40E70337AB24C9B
2 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
desktop/pnpm-lock.yaml
View File

@ -941,8 +941,8 @@ packages:
lodash.union@4.6.0:
resolution: {integrity: sha512-c4pB2CdGrGdjMKYLA+XiRDO7Y0PRQbm/Gzg8qMj+QH+pFVAoTp5sBpO0odL3FjoPCGjK96p6qsP+yQoiLoOBcw==}
lodash@4.17.23:
resolution: {integrity: sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==}
lodash@4.18.1:
resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
log-symbols@4.1.0:
resolution: {integrity: sha512-8XPvpAA8uyhfteu8pIvQxpJZ7SYYdpUivZpGy6sFsBuKRY/7rQGavedeB8aK+Zkyq6upMFVL/9AW6vOYzfRyLg==}
@ -1723,7 +1723,7 @@ snapshots:
dependencies:
debug: 4.4.3
fs-extra: 9.1.0
lodash: 4.17.23
lodash: 4.18.1
tmp-promise: 3.0.3
transitivePeerDependencies:
- supports-color
@ -2806,7 +2806,7 @@ snapshots:
lodash.union@4.6.0: {}
lodash@4.17.23: {}
lodash@4.18.1: {}
log-symbols@4.1.0:
dependencies:

14
frontend/pnpm-lock.yaml
View File

@ -4883,8 +4883,8 @@ packages:
lodash.truncate@4.4.2:
resolution: {integrity: sha512-jttmRe7bRse52OsWIMDLaXxWqRAmtIUccAQ3garviCqJjafXOfNMO0yMfNpdD6zbGaTU0P5Nz7e7gAT6cKmJRw==}
lodash@4.17.23:
resolution: {integrity: sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==}
lodash@4.18.1:
resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
log-symbols@4.1.0:
resolution: {integrity: sha512-8XPvpAA8uyhfteu8pIvQxpJZ7SYYdpUivZpGy6sFsBuKRY/7rQGavedeB8aK+Zkyq6upMFVL/9AW6vOYzfRyLg==}
@ -11434,7 +11434,7 @@ snapshots:
cli-width: 3.0.0
external-editor: 3.1.0
figures: 3.2.0
lodash: 4.17.23
lodash: 4.18.1
mute-stream: 0.0.8
run-async: 2.4.1
rxjs: 6.6.7
@ -11809,7 +11809,7 @@ snapshots:
lodash.truncate@4.4.2: {}
lodash@4.17.23: {}
lodash@4.18.1: {}
log-symbols@4.1.0:
dependencies:
@ -13924,7 +13924,7 @@ snapshots:
dependencies:
axios: 1.13.5
joi: 18.0.2
lodash: 4.17.23
lodash: 4.18.1
minimist: 1.2.8
rxjs: 7.8.2
transitivePeerDependencies:
@ -14028,7 +14028,7 @@ snapshots:
fast-json-stable-stringify: 2.1.0
fs-extra: 9.1.0
glob: 11.1.0
lodash: 4.17.23
lodash: 4.18.1
pretty-bytes: 5.6.0
rollup: 4.60.1
source-map: 0.8.0-beta.0
@ -14180,7 +14180,7 @@ snapshots:
yaml-eslint-parser@1.2.3:
dependencies:
eslint-visitor-keys: 3.4.3
lodash: 4.17.23
lodash: 4.18.1
yaml: 2.8.3
yaml@2.8.3: {}