[SG-36530] NPM dependency upgrades: Prototype Pollution in lodash
There are no commits yet
Push commits to the source branch or add previously merged commits to review them.
Created by: gitstart-sourcegraph
Dependabot alert here
Versions of lodash before 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep allows a malicious user to modify the prototype of Object via {constructor: {prototype: {...}}} causing the addition or modification of an existing property that will exist on all objects.
Checked dependencies: @percy/cli -> @percy/cli-* -> @percy/cli-command -> @oclif/plugin-help -> lodash.template@^4.5.0
Changes: Upgrade @percy/cli version
Sourcegraph Issue GitStart Issue
Make sure all CI checks passed
Check out the client app preview documentation to learn more.
Push commits to the source branch or add previously merged commits to review them.