ElemeFE / ElemeFE/element

[Bug Report] Lodash 4.17.21 以下版本含有高危漏洞

Open
#22,445 10 comments 0 reactions 0 assignees View on GitHub
Dominant language
Vue
Stars
54k
Forks
14.4k
PR merge metrics
No merged PRs in 30d

Description

### Element UI version
2.15.13

### OS/Browsers version
Windows 10 / Chrome

### Vue version
2.7.14

### Reproduction Link
https://jsfiddle.net/

### Steps to reproduce
请点击以下链接查看:

https://nvd.nist.gov/vuln/detail/CVE-2021-23337

https://nvd.nist.gov/vuln/detail/CVE-2020-8203

https://nvd.nist.gov/vuln/detail/CVE-2020-28500

### What is Expected?
希望升级lodash版本到4.17.21,修复高危漏洞

### What is actually happening?
项目引用的lodash版本较低,有高危漏洞

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.