xrahul / issuesgithub Goto Github PK

Vulnerabilities

DepShield reports that this application's usage of lodash.clonedeep:4.5.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.clonedeep:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• laravel-elixir:5.0.0
        └─ gulp-sass:2.3.2
              └─ lodash.clonedeep:4.5.0
              └─ node-sass:3.13.1
                    └─ lodash.clonedeep:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.keys:3.1.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.keys:3.1.2 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash.template:3.6.2
                    └─ lodash.keys:3.1.2

• laravel-elixir:5.0.0
        └─ gulp-notify:2.2.0
              └─ node-notifier:4.6.1
                    └─ lodash.clonedeep:3.0.2
                          └─ lodash._baseclone:3.3.0
                                └─ lodash._baseassign:3.2.0
                                      └─ lodash.keys:3.1.2
                                └─ lodash.keys:3.1.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash._basevalues:3.0.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._basevalues:3.0.0 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash.template:3.6.2
                    └─ lodash._basevalues:3.0.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: Unsupported composer value
• WARN: Detected empty commit - aborting git push

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update dependency fzaninotto/faker to v1.9.2
• Update dependency graham-campbell/github to v4.4.2
• Update symfony packages to v7 (major) (symfony/css-selector, symfony/dom-crawler)
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• Update dependency bootstrap-sass to v3.4.3
• Update dependency laravel/framework to v5.8.38
• Update dependency laravelcollective/html to v5.8.1
• Update dependency gulp to v4

Other Branches

These updates are pending. To force PRs open, click the checkbox below.

• Update dependency phpunit/phpunit to v4.8.28 [SECURITY]

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency mockery/mockery to v0.9.11
• Update symfony packages to v3.4.47 (symfony/css-selector, symfony/dom-crawler)
• Update dependency graham-campbell/github to v12
• Update dependency laravel/framework to v10
• Update dependency laravelcollective/html to v6
• Update dependency mockery/mockery to v1
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

composer

composer.json

• php >=5.5.9
• laravel/framework 5.2.45
• graham-campbell/github 4.4.2
• laravelcollective/html 5.7.1
• fzaninotto/faker ~1.8
• mockery/mockery 0.9.10
• phpunit/phpunit ~4.8
• symfony/css-selector 2.8.*|3.0.*
• symfony/dom-crawler 2.8.*|3.0.*

npm

package.json

• laravel-elixir 5.0.0
• bootstrap-sass 3.4.1
• gulp 3.9.1

---

• Check this box to trigger a request for Renovate to run again on this repository

Vulnerabilities

DepShield reports that this application's usage of shell-quote:0.0.1 results in the following vulnerability(s):

• (CVSS 8.4) CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

---

Occurrences

shell-quote:0.0.1 is a transitive dependency introduced by the following direct dependency(s):

• laravel-elixir:5.0.0
        └─ browserify:11.2.0
              └─ shell-quote:0.0.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.pick:4.4.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.pick:4.4.0 is a transitive dependency introduced by the following direct dependency(s):

• laravel-elixir:5.0.0
        └─ gulp-less:3.5.0
              └─ accord:0.28.0
                    └─ lodash.pick:4.4.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash._bindcallback:3.0.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._bindcallback:3.0.1 is a transitive dependency introduced by the following direct dependency(s):

• laravel-elixir:5.0.0
        └─ gulp-notify:2.2.0
              └─ node-notifier:4.6.1
                    └─ lodash.clonedeep:3.0.2
                          └─ lodash._bindcallback:3.0.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.isarray:3.0.4 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.isarray:3.0.4 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash.template:3.6.2
                    └─ lodash.keys:3.1.2
                          └─ lodash.isarray:3.0.4

• laravel-elixir:5.0.0
        └─ gulp-notify:2.2.0
              └─ node-notifier:4.6.1
                    └─ lodash.clonedeep:3.0.2
                          └─ lodash._baseclone:3.3.0
                                └─ lodash.isarray:3.0.4

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.debounce:4.0.8 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.debounce:4.0.8 is a transitive dependency introduced by the following direct dependency(s):

• laravel-elixir:5.0.0
        └─ browser-sync:2.26.3
              └─ chokidar:2.0.4
                    └─ lodash.debounce:4.0.8

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash._reinterpolate:3.0.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._reinterpolate:3.0.0 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash._reinterpolate:3.0.0
              └─ lodash.template:3.6.2
                    └─ lodash._reinterpolate:3.0.0
                    └─ lodash.templatesettings:3.1.1
                          └─ lodash._reinterpolate:3.0.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash._basecopy:3.0.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._basecopy:3.0.1 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash.template:3.6.2
                    └─ lodash._basecopy:3.0.1

• laravel-elixir:5.0.0
        └─ gulp-notify:2.2.0
              └─ node-notifier:4.6.1
                    └─ lodash.clonedeep:3.0.2
                          └─ lodash._baseclone:3.3.0
                                └─ lodash._baseassign:3.2.0
                                      └─ lodash._basecopy:3.0.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.defaults:4.2.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.defaults:4.2.0 is a transitive dependency introduced by the following direct dependency(s):

• laravel-elixir:5.0.0
        └─ gulp-less:3.5.0
              └─ accord:0.28.0
                    └─ lodash.defaults:4.2.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.clone:4.5.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.clone:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• laravel-elixir:5.0.0
        └─ gulp-less:3.5.0
              └─ accord:0.28.0
                    └─ lodash.clone:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash._baseassign:3.2.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._baseassign:3.2.0 is a transitive dependency introduced by the following direct dependency(s):

• laravel-elixir:5.0.0
        └─ gulp-notify:2.2.0
              └─ node-notifier:4.6.1
                    └─ lodash.clonedeep:3.0.2
                          └─ lodash._baseclone:3.3.0
                                └─ lodash._baseassign:3.2.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of hoek:2.16.3 results in the following vulnerability(s):

• (CVSS 6.5) [CVE-2018-3728] Improper Access Control

---

Occurrences

hoek:2.16.3 is a transitive dependency introduced by the following direct dependency(s):

• laravel-elixir:5.0.0
        └─ gulp-less:3.5.0
              └─ less:2.7.3
                    └─ request:2.81.0
                          └─ hawk:3.1.3
                                └─ boom:2.10.1
                                      └─ hoek:2.16.3
                                └─ hoek:2.16.3
                                └─ sntp:1.0.9
                                      └─ hoek:2.16.3

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash._reevaluate:3.0.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._reevaluate:3.0.0 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash._reevaluate:3.0.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.isarguments:3.1.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.isarguments:3.1.0 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash.template:3.6.2
                    └─ lodash.keys:3.1.2
                          └─ lodash.isarguments:3.1.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.restparam:3.6.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.restparam:3.6.1 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash.template:3.6.2
                    └─ lodash.restparam:3.6.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.escape:3.2.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.escape:3.2.0 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash.template:3.6.2
                    └─ lodash.escape:3.2.0
                    └─ lodash.templatesettings:3.1.1
                          └─ lodash.escape:3.2.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.merge:4.6.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.merge:4.6.1 is a transitive dependency introduced by the following direct dependency(s):

• laravel-elixir:5.0.0
        └─ gulp-less:3.5.0
              └─ accord:0.28.0
                    └─ lodash.merge:4.6.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.flatten:4.4.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.flatten:4.4.0 is a transitive dependency introduced by the following direct dependency(s):

• laravel-elixir:5.0.0
        └─ gulp-less:3.5.0
              └─ accord:0.28.0
                    └─ lodash.flatten:4.4.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash._reescape:3.0.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._reescape:3.0.0 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash._reescape:3.0.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash._basetostring:3.0.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._basetostring:3.0.1 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash.template:3.6.2
                    └─ lodash._basetostring:3.0.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.template:3.6.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.template:3.6.2 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash.template:3.6.2

• laravel-elixir:5.0.0
        └─ gulp-notify:2.2.0
              └─ lodash.template:3.6.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash._isiterateecall:3.0.9 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._isiterateecall:3.0.9 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash.template:3.6.2
                    └─ lodash._isiterateecall:3.0.9

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.uniq:4.5.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.uniq:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• laravel-elixir:5.0.0
        └─ gulp-cssnano:2.1.3
              └─ cssnano:3.10.0
                    └─ postcss-merge-rules:2.1.2
                          └─ caniuse-api:1.6.1
                                └─ lodash.uniq:4.5.0
        └─ gulp-less:3.5.0
              └─ accord:0.28.0
                    └─ lodash.uniq:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.assign:4.2.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.assign:4.2.0 is a transitive dependency introduced by the following direct dependency(s):

• laravel-elixir:5.0.0
        └─ gulp-notify:2.2.0
              └─ node-notifier:4.6.1
                    └─ cli-usage:0.1.8
                          └─ marked-terminal:3.1.1
                                └─ lodash.assign:4.2.0
        └─ gulp-sass:2.3.2
              └─ node-sass:3.13.1
                    └─ lodash.assign:4.2.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.memoize:4.1.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.memoize:4.1.2 is a transitive dependency introduced by the following direct dependency(s):

• laravel-elixir:5.0.0
        └─ gulp-cssnano:2.1.3
              └─ cssnano:3.10.0
                    └─ postcss-merge-rules:2.1.2
                          └─ caniuse-api:1.6.1
                                └─ lodash.memoize:4.1.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash._getnative:3.9.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._getnative:3.9.1 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash.template:3.6.2
                    └─ lodash.keys:3.1.2
                          └─ lodash._getnative:3.9.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash._root:3.0.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash._root:3.0.1 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash.template:3.6.2
                    └─ lodash.escape:3.2.0
                          └─ lodash._root:3.0.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.isfinite:3.3.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.isfinite:3.3.2 is a transitive dependency introduced by the following direct dependency(s):

• laravel-elixir:5.0.0
        └─ browser-sync:2.26.3
              └─ portscanner:2.1.1
                    └─ is-number-like:1.0.8
                          └─ lodash.isfinite:3.3.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.templatesettings:3.1.1 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.templatesettings:3.1.1 is a transitive dependency introduced by the following direct dependency(s):

• gulp:3.9.1
        └─ gulp-util:3.0.8
              └─ lodash.template:3.6.2
                    └─ lodash.templatesettings:3.1.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}