The transitive dependency [email protected] has known vulnerabilities

[yisehak-awm]

Version 4.17.2 of lodash has these vulnerabilities

• CVE-2019-10744
• CVE-2020-8203
• CVE-2019-1010266
• CVE-2020-28500

Update to v4.17.21 fixes all vulnerabilities.

[mrsum]

Hello @yisehak-awm, sorry for delay. Right now i working on new version of plugin with TS and other cool features, based on Webpack 5. Stay tune

[yisehak-awm]

Hi Mike, Great to hear from you. Will the new plugin be backward compatible with the old one? Our codebase is huge and is over a decade old. I put in pull requests for the version upgrades. We would love it if those changes went through. I would save us a lot of trouble. If the new plugin works with the old codebase that's great. Either way, we look forward to your upcoming works and thank you for your contribution on the plugin :) Hope to hear from you soon

…

On Wed, Mar 23, 2022 at 11:39 AM Mike Chernobrov ***@***.***> wrote: Hello @yisehak-awm <https://github.com/yisehak-awm>, sorry for delay. Right now i working on new version of plugin with TS and other cool features, based on Webpack 5. Stay tune — Reply to this email directly, view it on GitHub <#192 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AFR7ZDUJALHBWRWRIC7QMRDVBLKD5ANCNFSM5RG7G3KA> . You are receiving this because you were mentioned.Message ID: ***@***.***>