Skip to content

Commit 99cb046

Browse files
Constantine PoltyrevNikaple
authored andcommitted
fix(deps): fix lodash.set vulnerability issue
1 parent e7ff037 commit 99cb046

File tree

3 files changed

+1518
-1435
lines changed

3 files changed

+1518
-1435
lines changed

lib/loader/dotenv-loader.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66

77
import * as fs from 'fs';
88
import { resolve } from 'path';
9-
import set from 'lodash.set';
9+
import set from 'set-value';
1010
import { loadPackage } from '../utils/load-package.util';
1111
import { debug } from '../utils/debug.util';
1212

package.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@
4343
"debug": "4.3.4",
4444
"lodash.frompairs": "4.0.1",
4545
"lodash.merge": "4.6.2",
46-
"lodash.set": "4.3.2"
46+
"set-value": "^4.1.0"
4747
},
4848
"pnpm": {
4949
"overrides": {
@@ -57,7 +57,6 @@
5757
"@latipun7/commitlintrc": "1.1.3",
5858
"@latipun7/releaserc": "^2.1.0",
5959
"@nestjs/axios": "3.0.0",
60-
"axios": "1.5.0",
6160
"@nestjs/cli": "10.1.17",
6261
"@nestjs/common": "10.2.5",
6362
"@nestjs/core": "10.2.5",
@@ -68,10 +67,11 @@
6867
"@types/jest": "29.5.5",
6968
"@types/lodash.frompairs": "4.0.7",
7069
"@types/lodash.merge": "4.6.7",
71-
"@types/lodash.set": "4.3.7",
7270
"@types/node": "18.17.17",
71+
"@types/set-value": "^4.0.1",
7372
"@typescript-eslint/eslint-plugin": "5.62.0",
7473
"@typescript-eslint/parser": "5.62.0",
74+
"axios": "1.5.0",
7575
"cosmiconfig": "8.3.6",
7676
"dotenv": "16.3.1",
7777
"dotenv-expand": "10.0.0",

0 commit comments

Comments
 (0)