From 18a99e86749767cfec882eb07bf58cf50762b9a1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Guido=20Garc=C3=ADa?= <673420+palmerabollo@users.noreply.github.com> Date: Tue, 7 Aug 2018 09:52:03 +0200 Subject: [PATCH] bump lodash version Bump lodash to 4.17.5 because previous versions are affected by this security issue https://nvd.nist.gov/vuln/detail/CVE-2018-3721 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 5cea0f9..ba5deaf 100644 --- a/package.json +++ b/package.json @@ -6,7 +6,7 @@ "main": "bin/gitbook.js", "dependencies": { "q": "1.5.0", - "lodash": "4.17.4", + "lodash": "4.17.5", "semver": "5.3.0", "npmi": "1.0.1", "tmp": "0.0.31",