Dávid Paksy created HBASE-29848:
-----------------------------------

             Summary: Bump lodash from 4.17.21 to 4.17.23 in /hbase-website
                 Key: HBASE-29848
                 URL: https://issues.apache.org/jira/browse/HBASE-29848
             Project: HBase
          Issue Type: Task
          Components: website
            Reporter: Dávid Paksy


New moderate CVE:

Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions

[https://github.com/apache/hbase/security/dependabot/125]

Transitive dependency *lodash 4.17.21* is introduced via
 * @react-router/dev 7.12.0  lodash 4.17.21



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to