Skip to content

Commit 58124e1

Browse files
sandeep3028meta-codesync[bot]
authored andcommitted
Upgrade lodash to 4.18.1 across multiple yarn.lock files
Summary: Upgrade lodash from 4.17.21/4.17.15 to 4.18.1 and lodash-es from 4.17.21 to 4.18.1 across multiple projects to remediate CVE-2025-13465 (Prototype Pollution) and CVE-2026-4800 (Code Injection) security vulnerabilities. Reviewed By: huntie Differential Revision: D103903023 fbshipit-source-id: c2f2d2a79ff89ea5230dee654a67071fd69d6061
1 parent 6eb7442 commit 58124e1

2 files changed

Lines changed: 6 additions & 6 deletions

File tree

website/yarn.lock

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6573,9 +6573,9 @@ lodash.uniq@^4.5.0:
65736573
integrity sha512-xfBaXQd9ryd9dlSDvnvI0lvxfLJlYAZzXomUYzLKtUeOQvOP5piqAWuGtrhWeqaXK9hhoM/iyJc5AV+XfsX3HQ==
65746574

65756575
lodash@^4.17.20, lodash@^4.17.21:
6576-
version "4.17.21"
6577-
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
6578-
integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
6576+
version "4.18.1"
6577+
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.18.1.tgz#ff2b66c1f6326d59513de2407bf881439812771c"
6578+
integrity sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==
65796579

65806580
longest-streak@^3.0.0:
65816581
version "3.1.0"

yarn.lock

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4378,9 +4378,9 @@ lodash.throttle@^4.1.1:
43784378
integrity sha1-wj6RtxAkKscMN/HhzaknTMOb8vQ=
43794379

43804380
lodash@^4.17.14, lodash@^4.17.21:
4381-
version "4.17.21"
4382-
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
4383-
integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
4381+
version "4.18.1"
4382+
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.18.1.tgz#ff2b66c1f6326d59513de2407bf881439812771c"
4383+
integrity sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==
43844384

43854385
loose-envify@^1.0.0, loose-envify@^1.4.0:
43864386
version "1.4.0"

0 commit comments

Comments
 (0)