privilegedescalation/headlamp-tns-csi-plugin
Archived
12
0
Fork 0
Code Issues 1 Pull Requests 2 Actions Packages Projects Releases 13 Wiki Activity

fix: override lodash >=4.18.0 to patch code injection vulnerability #29

Merged
privilegedescalation-engineer[bot] merged 2 commits from fix/lodash-cve-ghsa-r5fr-rjxr-66jc into main 2026-05-04 03:23:58 +00:00
Conversation 12 Commits 2 Files Changed -
+3
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit f3401bbea3 - Show all commits
pnpm-lock.yaml
Generated
+3
View File
@@ -38,6 +38,9 @@ importers:
jsdom: jsdom:
specifier: ^24.0.0 specifier: ^24.0.0
version: 24.1.3 version: 24.1.3
lodash:
specifier: 4.18.1
version: 4.18.1
notistack: notistack:
specifier: ^3.0.0 specifier: ^3.0.0
version: 3.0.2(csstype@3.2.3)(react-dom@18.3.1(react@18.3.1))(react@18.3.1) version: 3.0.2(csstype@3.2.3)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)