Prototype Pollution NPM Vulnerability Persists After Lodash Update

0

I'm trying to fix an NPM-related vulnerability for a JHipster project. When I run "npm audit" for my project, there's a Prototype Pollution vulnerability that keeps showing up (https://i.stack.imgur.com/fSYf9.png). After updating the Lodash version according to the link to the solution that's inside the npm audit security report, I ran "npm info lodash version" to see that my lodash version was 4.17.15, which is later than 4.17.12 (according to https://www.npmjs.com/advisories/1065). But the vulnerability keeps showing up when I run "npm audit". Please help and thank you!

qccaprospect

Posted 2019-08-26T00:36:28.390

Reputation: 11

No answers