From 158531b391d6b9e7b2aa582d9233569c279c9948 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 13 Jul 2024 12:14:11 +0000 Subject: [PATCH] Bump lodash from 4.17.10 to 4.17.21 in /part2/VulnerableAppTwo Bumps [lodash](https://github.com/lodash/lodash) from 4.17.10 to 4.17.21. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.10...4.17.21) --- updated-dependencies: - dependency-name: lodash dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- part2/VulnerableAppTwo/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/part2/VulnerableAppTwo/package.json b/part2/VulnerableAppTwo/package.json index 1f1023c..e035a27 100644 --- a/part2/VulnerableAppTwo/package.json +++ b/part2/VulnerableAppTwo/package.json @@ -8,7 +8,7 @@ }, "dependencies": { "express": "4.16.0", // Known to have vulnerabilities in this version - "lodash": "4.17.10", // Vulnerable version + "lodash": "4.17.21", // Vulnerable version "marked": "0.3.6", // Vulnerable version "mongoose": "5.0.16", // Known vulnerabilities in this version "request": "2.81.0" // Deprecated and has known vulnerabilities