Update lodash dependency (see CVE-2020-8203)
Open
- Dominant language
- JavaScript
- Stars
- 4.4k
- Forks
- 217
- PR merge metrics
- No merged PRs in 30d
Description
Current used version in `babel-plugin-minify-dead-code-elimination` and `babel-preset-minify`is 4.17.11.
Please refer to https://nvd.nist.gov/vuln/detail/CVE-2020-8203 and update to 4.17.20 (latest).
Contributor guide
Assessment
This issue has not been assessed yet.