Hmm - I reran the report on lighthouse (pointing at this site), and it sees lo-dash now at version 4.17.5, which is a great deal newer but still has 2 vulnerabilities including the high severity one. It looks like the fix is in 4.17.11, according to
Ed_S
(Ed S)
8
Related topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| Vulnerabilities in the official Docker image | 1 | 938 | May 19, 2023 | |
| Lodash.js missing | 6 | 827 | October 16, 2020 | |
| 3.2.4: Security and bug fix release | 0 | 404 | July 15, 2024 | |
| Unable to find discourse version 2.9.0.beta6 | 3 | 731 | July 4, 2022 | |
| Vulnerability patching of npm/gem dependencies in discourse | 2 | 218 | October 13, 2025 |