11 Commits

Author SHA1 Message Date
John-David Dalton
abbc90df65 Fix prototype pollution in _.unset and _.omit (#6065)
Prevent prototype pollution on baseUnset function by:
- Blocking "__proto__" if not an own property
- Blocking "constructor.prototype" chains (except when starting at primitive root)
- Skipping non-string keys

See: https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg
2025-12-10 07:53:08 -05:00
John-David Dalton
035ce4f44c Bump to v4.17.2. 2016-11-15 22:22:55 -08:00
John-David Dalton
95f47b6d19 Bump to v4.17.1. 2016-11-14 20:56:46 -08:00
John-David Dalton
b1ff59b3ea Bump to v4.17.0. 2016-11-13 22:50:00 -08:00
John-David Dalton
cbf5cb1162 Bump to v4.14.2. 2016-08-07 21:23:34 -07:00
John-David Dalton
35cdf6513b Bump to v4.13.0. 2016-05-22 19:35:24 -07:00
John-David Dalton
35805ec250 Bump to v4.11.2. 2016-04-21 07:06:47 -07:00
John-David Dalton
f10bb8b80b Bump to v4.10.0. 2016-04-10 22:55:59 -07:00
John-David Dalton
ce0b51888c Bump to v4.7.0. 2016-03-31 00:36:47 -07:00
John-David Dalton
94ba2e24e8 Bump to v4.4.0. 2016-02-15 20:25:07 -08:00
John-David Dalton
466c67a8b6 Bump to v4.1.0. 2016-01-29 01:20:57 -08:00