Skip to content

[Snyk] Upgrade lodash from 4.17.20 to 4.17.23 - #2201

Open
X-oss-byte wants to merge 1 commit into
canaryfrom
snyk-upgrade-54bb1bacd19f61a389bd8ce33df9eabe
Open

[Snyk] Upgrade lodash from 4.17.20 to 4.17.23#2201
X-oss-byte wants to merge 1 commit into
canaryfrom
snyk-upgrade-54bb1bacd19f61a389bd8ce33df9eabe

Conversation

@X-oss-byte

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to upgrade lodash from 4.17.20 to 4.17.23.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 2 versions ahead of your current version.

  • The recommended version was released 22 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Code Injection
SNYK-JS-LODASH-1040724
586 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905
586 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-LODASH-15053838
586 No Known Exploit
Release notes
Package name: lodash from lodash GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade lodash from 4.17.20 to 4.17.23.

See this package in npm:
lodash

See this project in Snyk:
https://app.snyk.io/org/sammytezzy/project/7049064c-05e3-4d2e-be8c-fedc4a4e8361?utm_source=github&utm_medium=referral&page=upgrade-pr
@vercel

vercel Bot commented Feb 13, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
next-js-next-plugin-storybook Error Error Feb 13, 2026 0:17am
next-js-next-plugin-storybook-g5dx Error Error Feb 13, 2026 0:17am
next-js-next-plugin-storybook-y5ka Error Error Feb 13, 2026 0:17am
next-x-storybook Error Error Feb 13, 2026 0:17am

@vercel

vercel Bot commented Feb 13, 2026

Copy link
Copy Markdown

Deployment failed with the following error:

Invalid vercel.json file provided

@bolt-new-by-stackblitz

Copy link
Copy Markdown

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

@changeset-bot

changeset-bot Bot commented Feb 13, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 3392262

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants