68 Commits

Author SHA1 Message Date
John-David Dalton
abbc90df65 Fix prototype pollution in _.unset and _.omit (#6065)
Prevent prototype pollution on baseUnset function by:
- Blocking "__proto__" if not an own property
- Blocking "constructor.prototype" chains (except when starting at primitive root)
- Skipping non-string keys

See: https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg
2025-12-10 07:53:08 -05:00
Benjamin Tan
11eb817cdf Bump to v4.17.21 4.17.21-es 2021-02-20 23:33:13 +08:00
Benjamin Tan
42e2585e5f Bump to v4.17.20. 4.17.20-es 2020-12-20 14:19:47 +08:00
John-David Dalton
4d5fdc492f Bump to v4.17.15. 4.17.15-es 2019-07-17 10:12:50 -07:00
John-David Dalton
15421d13b7 Bump to v4.17.14. 4.17.14-es 2019-07-10 06:35:20 -07:00
John-David Dalton
078664194c Bump to v4.17.13. 4.17.13-es 2019-07-09 15:20:44 -07:00
John-David Dalton
51c827ffd9 Bump to v4.17.12. 4.17.12-es 2019-07-09 13:46:20 -07:00
John-David Dalton
349273409f Bump to v4.17.11. 4.17.11-es 2018-09-11 22:42:07 -07:00
John-David Dalton
cc483eda91 Bump to v4.17.10. 4.17.10-es 2018-04-24 15:35:01 -07:00
John-David Dalton
f73db1f02c Bump to v4.17.9. 4.17.9-es 2018-04-24 10:37:38 -07:00
John-David Dalton
546e924be3 Bump to v4.17.8. 4.17.8-es 2018-03-27 11:19:36 -07:00
John-David Dalton
b5a07bdc4b Bump to v4.17.7. 4.17.7-es 2018-03-07 15:13:19 -08:00
John-David Dalton
ae7044c0d3 Bump to v4.17.6. 4.17.6-es 2018-03-07 13:24:12 -08:00
John-David Dalton
edff3e8d25 Bump to v4.17.5. 4.17.5-es 2018-02-03 16:38:58 -08:00
John-David Dalton
528e134995 Bump to v4.17.4. 4.17.4-es 2016-12-31 13:35:01 -06:00
John-David Dalton
f71a7a04b5 Bump to v4.17.3. 4.17.3-es 2016-12-21 15:53:05 -06:00
John-David Dalton
035ce4f44c Bump to v4.17.2. 4.17.2-es 2016-11-15 22:22:55 -08:00
John-David Dalton
95f47b6d19 Bump to v4.17.1. 4.17.1-es 2016-11-14 20:56:46 -08:00
John-David Dalton
b1ff59b3ea Bump to v4.17.0. 4.17.0-es 2016-11-13 22:50:00 -08:00
John-David Dalton
50aaa95bca Bump to v4.16.6. 4.16.6-es 2016-10-31 21:08:04 -07:00
John-David Dalton
be1e9a3170 Bump to v4.16.5. 4.16.5-es 2016-10-30 20:08:19 -07:00
John-David Dalton
6778141728 Bump to v4.16.4. 4.16.4-es 2016-10-05 19:32:45 -07:00
John-David Dalton
d9fd2bdf9c Bump to v4.16.3. 4.16.3-es 2016-10-02 21:54:44 -07:00
John-David Dalton
ab95e7dde7 Bump to v4.16.2. 4.16.2-es 2016-09-25 13:40:14 -07:00
John-David Dalton
5425ef9a59 Bump to v4.16.1. 4.16.1-es 2016-09-20 09:50:26 -07:00
John-David Dalton
94ac73824f Bump to v4.16.0. 4.16.0-es 2016-09-17 22:28:43 -07:00
John-David Dalton
28663c1e27 Bump to v4.15.0. 4.15.0-es 2016-08-11 23:29:12 -07:00
John-David Dalton
cbf5cb1162 Bump to v4.14.2. 4.14.2-es 2016-08-07 21:23:34 -07:00
John-David Dalton
6d4f76888f Bump to v4.14.1. 4.14.1-es 2016-07-28 23:40:26 -07:00
John-David Dalton
51ed7e7707 Bump to v4.14.0. 4.14.0-es 2016-07-24 09:52:22 -07:00
John-David Dalton
6b3e0da93c Bump to v4.13.1. 4.13.1-es 2016-05-23 12:31:09 -07:00
John-David Dalton
35cdf6513b Bump to v4.13.0. 4.13.0-es 2016-05-22 19:35:24 -07:00
John-David Dalton
07c844053e Bump to v4.12.0. 4.12.0-es 2016-05-08 12:23:20 -07:00
John-David Dalton
35805ec250 Bump to v4.11.2. 4.11.2-es 2016-04-21 07:06:47 -07:00
John-David Dalton
692aabae13 Bump to v4.11.1. 4.11.1-es 2016-04-13 21:03:52 -07:00
John-David Dalton
764eccfdc0 Bump to v4.11.0. 4.11.0-es 2016-04-13 10:21:06 -07:00
John-David Dalton
f10bb8b80b Bump to v4.10.0. 4.10.0-es 2016-04-10 22:55:59 -07:00
John-David Dalton
b7e3b3febd Bump to v4.9.0. 4.9.0-es 2016-04-08 01:32:35 -07:00
John-David Dalton
e8cff1ef54 Bump to v4.8.2. 4.8.2-es 2016-04-04 13:55:37 -07:00
John-David Dalton
723c02dbfa Bump to v4.8.0. 4.8.0-es 2016-04-03 23:03:03 -07:00
John-David Dalton
ce0b51888c Bump to v4.7.0. 4.7.0-es 2016-03-31 00:36:47 -07:00
John-David Dalton
a83b4ebd53 Bump to v4.6.1. 4.6.1-es 2016-03-01 22:13:24 -08:00
John-David Dalton
7da4c55415 Bump to v4.6.0. 4.6.0-es 2016-02-29 23:41:02 -08:00
John-David Dalton
9055c4e483 Bump to v4.5.1. 4.5.1-es 2016-02-21 20:49:38 -08:00
John-David Dalton
2b1eb3f480 Bump to v4.5.0. 4.5.0-es 2016-02-16 23:15:59 -08:00
John-David Dalton
94ba2e24e8 Bump to v4.4.0. 4.4.0-es 2016-02-15 20:25:07 -08:00
John-David Dalton
8bff780a94 Bump to v4.3.0. 4.3.0-es 2016-02-08 00:50:21 -08:00
John-David Dalton
f18e5950b9 Bump to v4.2.1. 4.2.1-es 2016-02-03 00:54:36 -08:00
John-David Dalton
365d103439 Bump to v4.2.0. 4.2.0-es 2016-02-02 00:03:23 -08:00
John-David Dalton
466c67a8b6 Bump to v4.1.0. 4.1.0-es 2016-01-29 01:20:57 -08:00