Compare commits

...

2 Commits

Author SHA1 Message Date
Chris Farhood 9af291a8fb chore: regenerate pnpm-lock.yaml with lodash >=4.18.0 override
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-03 18:07:29 +00:00
Gandalf the Greybeard a7daabe4a0 fix: override lodash >=4.18.0 to patch code injection vulnerability
GHSA-r5fr-rjxr-66jc is a code injection vulnerability in lodash
below 4.18.0. The vulnerable transitive dependency comes through
@kinvolk/headlamp-plugin.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-23 10:58:22 +00:00
2 changed files with 925 additions and 841 deletions
+2 -1
View File
@@ -31,7 +31,8 @@
},
"overrides": {
"tar": "^7.5.11",
"undici": "^7.24.3"
"undici": "^7.24.3",
"lodash": ">=4.18.0"
},
"devDependencies": {
"@headlamp-k8s/eslint-config": "^0.6.0",
+923 -840
View File
File diff suppressed because it is too large Load Diff