Skip to content

Update for CVE-2018-16487 around lodash - #845

Closed
aeppert wants to merge 5 commits into
dresende:masterfrom
aeppert:master
Closed

aeppert wants to merge 5 commits into
dresende:masterfrom
aeppert:master

Conversation

@aeppert

@aeppert aeppert commented Jul 15, 2019

Copy link
Copy Markdown

No description provided.

@bluet bluet left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think you need to update package-lock.json (using npm i with updated package.json) too to make tests pass in node >= 8.
https://travis-ci.org/dresende/node-orm2/jobs/559061154#L470

@bluet

bluet commented Aug 11, 2019

Copy link
Copy Markdown

@aeppert seems there are still some inconsistencies. Can you check the travis-ci output error msgs and try to fix it?

P.S. I'm not a maintainer of this projects, just offering my feedback and hope @dresende can take a look when all the tests are pass.

@dxg

dxg commented Nov 4, 2019 •

Copy link
Copy Markdown
Collaborator

Thanks for raising this. Wasn't practical to fix in here, however I've resolved it in the PR linked above.
New version with the fix has been published - v5.0.5

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants