Vulnerable Libraries - lodash-2.4.2.tgz, lodash-4.17.11.tgz, lodash-1.0.2.tgz, lodash-0.9.2.tgz, lodash-3.10.1.tgz
lodash-2.4.2.tgz
A utility library delivering consistency, customization, performance, & extras.
Library home page: https://registry.npmjs.org/lodash/-/lodash-2.4.2.tgz
Path to dependency file: /package.json
Path to vulnerable library: /node_modules/grunt-legacy-log-utils/node_modules/lodash/package.json,/node_modules/grunt-legacy-log/node_modules/lodash/package.json,/node_modules/grunt-contrib-watch/node_modules/lodash/package.json,/node_modules/findup-sync/node_modules/lodash/package.json
Dependency Hierarchy:
- grunt-0.4.5.tgz (Root Library)
- findup-sync-0.1.3.tgz
- ❌ lodash-2.4.2.tgz (Vulnerable Library)
lodash-4.17.11.tgz
Lodash modular utilities.
Library home page: https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz
Path to dependency file: /package.json
Path to vulnerable library: /node_modules/lodash/package.json
Dependency Hierarchy:
- babel-core-6.26.3.tgz (Root Library)
- ❌ lodash-4.17.11.tgz (Vulnerable Library)
lodash-1.0.2.tgz
A utility library delivering consistency, customization, performance, and extras.
Library home page: https://registry.npmjs.org/lodash/-/lodash-1.0.2.tgz
Path to dependency file: /package.json
Path to vulnerable library: /node_modules/globule/node_modules/lodash/package.json
Dependency Hierarchy:
- grunt-contrib-watch-0.6.1.tgz (Root Library)
- gaze-0.5.2.tgz
- globule-0.1.0.tgz
- ❌ lodash-1.0.2.tgz (Vulnerable Library)
lodash-0.9.2.tgz
A utility library delivering consistency, customization, performance, and extras.
Library home page: https://registry.npmjs.org/lodash/-/lodash-0.9.2.tgz
Path to dependency file: /package.json
Path to vulnerable library: /node_modules/grunt-legacy-util/node_modules/lodash/package.json,/node_modules/grunt/node_modules/lodash/package.json
Dependency Hierarchy:
- grunt-0.4.5.tgz (Root Library)
- ❌ lodash-0.9.2.tgz (Vulnerable Library)
lodash-3.10.1.tgz
The modern build of lodash modular utilities.
Library home page: https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz
Path to dependency file: /package.json
Path to vulnerable library: /node_modules/grunt-browserify/node_modules/lodash/package.json
Dependency Hierarchy:
- grunt-browserify-3.8.0.tgz (Root Library)
- ❌ lodash-3.10.1.tgz (Vulnerable Library)
Found in HEAD commit: c781bc70bf644365a48f63cb560a9d2fe0ae2e3b
Found in base branch: master
Suggested Fix
Type: Upgrade version
Origin: GHSA-jf85-cpcp-j695
Release Date: 2019-07-26
Fix Resolution (lodash): 4.17.12
Direct dependency fix Resolution (grunt): 1.0.3
Fix Resolution (lodash): 4.17.12
Direct dependency fix Resolution (babel-core): 7.0.0-bridge.0
Fix Resolution (lodash): 4.17.12
Direct dependency fix Resolution (grunt-contrib-watch): 1.0.1
Fix Resolution (lodash): 4.17.12
Direct dependency fix Resolution (grunt): 1.0.3
Fix Resolution (lodash): 4.17.12
Direct dependency fix Resolution (grunt-browserify): 5.1.0