CVE-2026-4800 CVE-2026-2950 lodash vulnerable to Code Injection via _.template imports key names lodash vulnerable to Prototype Pollution via array path bypass in _.unset and _.omit (#978)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

openam-ui/openam-ui-api/package-lock.json

@@ -10,7 +10,7 @@
     "grunt": "^1.6.1",
     "grunt-cli": "1.4.3",
     "grunt-contrib-copy": "1.0.0",
-    "lodash": "^4.17.23"
+    "lodash": "^4.18.1"
   },
   "dependencies": {
     "swagger-ui-dist": ">=5.29.0"

openam-ui/openam-ui-api/package.json

@@ -44,7 +44,7 @@
     "karma-nyan-reporter": "0.2.4",
     "karma-requirejs": "1.1.0",
     "less-plugin-clean-css": "1.5.1",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "mocha": "7.2.0",
     "requirejs": "2.3.7",
     "rimraf": "2.5.4",