From 548203282444a59ba0ece4452b6c7984990df31a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Rapha=C3=ABl=20Huchet?= Date: Tue, 17 Jul 2018 12:57:45 +0200 Subject: [PATCH] prototype pollution Versions of lodash before 4.17.5 are vulnerable to prototype pollution: https://nodesecurity.io/advisories/577 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 51930fb..b9d0e19 100644 --- a/package.json +++ b/package.json @@ -40,7 +40,7 @@ "express-session": "^1.15.6", "express-validator": "^4.3.0", "fbgraph": "^1.4.1", - "lodash": "^4.17.4", + "lodash": "^4.17.5", "lusca": "^1.5.2", "mongoose": "^4.13.11", "nodemailer": "^4.4.1",