Skip to content
This repository has been archived by the owner on Mar 13, 2022. It is now read-only.

Update feathers-vuex to 2.x.x #4

Open
nothingismagick opened this issue May 2, 2019 · 1 comment
Open

Update feathers-vuex to 2.x.x #4

nothingismagick opened this issue May 2, 2019 · 1 comment

Comments

@nothingismagick
Copy link
Contributor

Previously in 1.x.x lodash.merge was being used. There are issues with that that have since been resolved. Please see:

feathersjs-ecosystem/feathers-vuex#213

✗ Medium severity vulnerability found in lodash.merge
  Description: Prototype Pollution
  Info: https://snyk.io/vuln/SNYK-JS-LODASHMERGE-173733
  Introduced through: [email protected]
  From: [email protected] > [email protected]

✗ High severity vulnerability found in lodash.merge
  Description: Prototype Pollution
  Info: https://snyk.io/vuln/SNYK-JS-LODASHMERGE-173732
  Introduced through: [email protected]
  From: [email protected] > [email protected]
@nothingismagick
Copy link
Contributor Author

Latest at the time of this writing is v2.0.0-pre.24
https://github.com/feathers-plus/feathers-vuex/releases

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@nothingismagick