Sindre Sorhus/pageres

Dependabot security warning: Prototype Pollution in lodash

3 months ago

👍

Dependabot cannot update lodash to a non-vulnerable version
The latest possible version that can be installed is 3.10.1 because of the following conflicting dependencies:

[email protected] requires lodash@^3.2.0 via a transitive dependency on [email protected]
No patched version available for lodash
The earliest fixed version is 4.17.21.

sindresorhus / pageres

Capture website screenshots

9.7k

How does funding with Polar work?

Pay now to fund the work behind this issue.

Get updates on progress being made.

Maintainer is rewarded once the issue is completed.

FAQ

Backer

You're funding impactful open source efforts

Contributor

You want to contribute to this effort

Maintainer

You want to get funding like this too

Sindre Sorhus/pageres

Dependabot security warning: Prototype Pollution in lodash

How does funding with Polar work?

Backer

Why does "Fund on completion" require GitHub login?

When is the invoice due for "Fund on completion"?

What happens if the issue is never completed?

Do I get any extra benefits by funding?

Do I get progress updates?

Contributor

Do I get a reward?

Is rewards guaranteed?

Maintainer

How can I get funding like this for my open source initiatives?