{"action":"closed","issue":{"url":"https://api.github.com/repos/strongloop/loopback-component-explorer/issues/241","repository_url":"https://api.github.com/repos/strongloop/loopback-component-explorer","labels_url":"https://api.github.com/repos/strongloop/loopback-component-explorer/issues/241/labels{/name}","comments_url":"https://api.github.com/repos/strongloop/loopback-component-explorer/issues/241/comments","events_url":"https://api.github.com/repos/strongloop/loopback-component-explorer/issues/241/events","html_url":"https://github.com/strongloop/loopback-component-explorer/issues/241","id":322165577,"number":241,"title":"lodash security risk for version 2.7.0","user":{"login":"adrian999999","id":21298787,"avatar_url":"https://avatars3.githubusercontent.com/u/21298787?v=4","gravatar_id":"","url":"https://api.github.com/users/adrian999999","html_url":"https://github.com/adrian999999","followers_url":"https://api.github.com/users/adrian999999/followers","following_url":"https://api.github.com/users/adrian999999/following{/other_user}","gists_url":"https://api.github.com/users/adrian999999/gists{/gist_id}","starred_url":"https://api.github.com/users/adrian999999/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adrian999999/subscriptions","organizations_url":"https://api.github.com/users/adrian999999/orgs","repos_url":"https://api.github.com/users/adrian999999/repos","events_url":"https://api.github.com/users/adrian999999/events{/privacy}","received_events_url":"https://api.github.com/users/adrian999999/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-05-11T04:43:40Z","updated_at":"2018-05-15T10:50:36Z","closed_at":"2018-05-15T10:50:36Z","author_association":"NONE","body":"<!--\r\nQuestions:\r\n  https://groups.google.com/forum/#!forum/loopbackjs\r\n  https://gitter.im/strongloop/loopback\r\nImmediate support:\r\n  https://strongloop.com/api-connect-faqs/\r\n  https://strongloop.com/node-js/subscription-plans/\r\n-->\r\n\r\n# Description/Steps to reproduce\r\nloopback-component-explorer@2.7.0 has a dependency of lodash@@3.10.1 \r\nwhich has a security risk.\r\n\r\nReference https://nodesecurity.io/advisories/577   \r\n\r\nnsp check\r\n\r\n# Additional information\r\nVulnerable    │ <4.17.5  \r\n Patched       │ >=4.17.5 \r\n<!--\r\nCopy+paste the output of these two commands:\r\n  node -e 'console.log(process.platform, process.arch, process.versions.node)'\r\n  npm ls --prod --depth 0 | grep loopback\r\n-->\r\n"}}
{"actor":{"display_login":"bajtos"}}