From be9ed841eb579a4f7b3360bed85275ec81fb860c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 May 2025 09:54:41 +0000 Subject: [PATCH] Bump lodash Bumps [lodash](https://github.com/lodash/lodash) from 4.17.4 to 4.17.21. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.4...4.17.21) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.21 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .../src-vulnerable-lodash/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingMergeCall/src-vulnerable-lodash/package.json b/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingMergeCall/src-vulnerable-lodash/package.json index bdc06dcd8b13..873053d4a7f7 100644 --- a/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingMergeCall/src-vulnerable-lodash/package.json +++ b/javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingMergeCall/src-vulnerable-lodash/package.json @@ -1,5 +1,5 @@ { "dependencies": { - "lodash": "4.17.4" + "lodash": "4.17.21" } }