Skip to content

Commit 45b8ca2

Browse files
chargomeclaude
andcommitted
fix(deps): Bump lodash to 4.17.23
Bump transitive lodash dependency from 4.17.21 to 4.17.23 to address CVE-2025-13465 (prototype pollution in `_.unset` and `_.omit`). Fixes https://github.com/getsentry/sentry-javascript/security/dependabot/966 Co-Authored-By: Claude <noreply@anthropic.com>
1 parent 471a683 commit 45b8ca2

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

yarn.lock

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -22276,9 +22276,9 @@ lodash.uniq@^4.2.0, lodash.uniq@^4.5.0:
2227622276
integrity sha1-0CJTc662Uq3BvILklFM5qEJ1R3M=
2227722277

2227822278
lodash@^4.17.12, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.19, lodash@^4.17.20, lodash@^4.17.21, lodash@~4.17.21:
22279-
version "4.17.21"
22280-
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
22281-
integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
22279+
version "4.17.23"
22280+
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.23.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a"
22281+
integrity sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==
2228222282

2228322283
log-symbols@^2.2.0:
2228422284
version "2.2.0"

0 commit comments

Comments
 (0)