JSNetworkX icon indicating copy to clipboard operation
JSNetworkX copied to clipboard
verified publisher icon fkling

Lodash 3.10.1 in dependencies has a security issue

Open benoitguigal opened this issue 7 years ago • 1 comments

(https://nvd.nist.gov/vuln/detail/CVE-2018-3721)[https://nvd.nist.gov/vuln/detail/CVE-2018-3721] Please update to version > 4.17.5

benoitguigal avatar Sep 20 '18 05:09 benoitguigal

I don't think the security issue is really that much of a "security" issue, but I will say that this would be good to fix because this project cannot [easily] be used in a project that is using Lodash v4, it gives a bunch of errors like: Module not found: Error: Can't resolve 'lodash/collection/shuffle'

joshribakoff-sm avatar Apr 09 '24 18:04 joshribakoff-sm