From 947b26c6d8520662243beb43894e0c94225412b0 Mon Sep 17 00:00:00 2001 From: Douglas Dowie <12088162+Larinar@users.noreply.github.com> Date: Thu, 24 Jun 2021 10:37:23 +0100 Subject: [PATCH] Upgrade lodash to fix a security issue (#776) Co-authored-by: Douglas --- CHANGELOG.md | 4 ++++ package.json | 4 ++-- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1a43f970..660b949b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,9 @@ # Gulp Sass Changelog +## v4.1.1 +**October 15, 2020** +* Upgrade lodash to address a security issue (Prototype Pollution). + ## v4.1.0 **April 23, 2020** diff --git a/package.json b/package.json index fde276c4..eece4c52 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "gulp-sass", - "version": "4.1.0", + "version": "4.1.1", "description": "Gulp plugin for sass", "main": "index.js", "engines": { @@ -25,7 +25,7 @@ }, "dependencies": { "chalk": "^2.3.0", - "lodash": "^4.17.11", + "lodash": "^4.17.20", "node-sass": "^4.8.3", "plugin-error": "^1.0.1", "replace-ext": "^1.0.0",