privilegedescalation/headlamp-kube-vip-plugin
Archived
12
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases 8 Wiki Activity

fix: override lodash >=4.18.0 to patch code injection vulnerability #40

Merged
privilegedescalation-engineer[bot] merged 2 commits from fix/lodash-cve-ghsa-r5fr-rjxr-66jc into main 2026-05-03 23:24:52 +00:00
Conversation 8 Commits 2 Files Changed 2
+925 -841
2 changed files with 925 additions and 841 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 1d65d5137a - Show all commits
package.json
+2 -1
View File
@@ -32,7 +32,8 @@
"overrides": {
"tar": "^7.5.11",
"undici": "^7.24.3",
"lodash": ">=4.18.0"
"lodash": ">=4.18.0",
"vite": ">=6.4.2"
},
"devDependencies": {
"@headlamp-k8s/eslint-config": "^0.6.0",
pnpm-lock.yaml
Generated
+923 -840
View File
File diff suppressed because it is too large Load Diff