# La versione di Lo-dash presenta una vulnerabilità di sicurezza di gravità elevata

**URL:** <https://meta.discourse.org/t/lo-dash-version-has-high-severity-security-vulnerability/117787>\
**Category:** Product Support\
**Created:** [15 Maggio 2019, 9:53am UTC](https://meta.discourse.org/t/lo-dash-version-has-high-severity-security-vulnerability/117787 "2019-05-15T09:53:38Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![Ed\_S](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ed_s/32/134015_2.png) [@Ed\_S](https://meta.discourse.org/u/Ed_S)\
**Post date:** [15 Maggio 2019, 9:53am UTC](https://meta.discourse.org/t/lo-dash-version-has-high-severity-security-vulnerability/117787/1 "2019-05-15T09:53:38Z")

</div>

Discourse embeds a custom copy of 1.3.0 version of lo-dash.

Google’s lighthouse analysis reports 4 security vulnerabilities on my up-to-date Discourse instance, 3 of which are in lo-dash and one of which is marked as High severity.

The lighthouse report links to

> **[lodash | Snyk](https://security.snyk.io/package/npm/lodash)**
>
> Security vulnerabilities and package health score for npm package lodash

Lighthouse is at

> **[PageSpeed Insights](https://pagespeed.web.dev/)**

and the report for this site, at  
[https://lighthouse-dot-webdotdevsite.appspot.com/lh/html?url=https://meta.discourse.org](https://lighthouse-dot-webdotdevsite.appspot.com/lh/html?url=https://meta.discourse.org)  
says under Best Practices

> Includes front-end JavaScript libraries with known security vulnerabilities **3 vulnerabilities detected**
> 
> Some third-party scripts may contain known security vulnerabilities that are easily identified and exploited by attackers. [Learn more](https://developers.google.com/web/tools/lighthouse/audits/vulnerabilities?utm_source=lighthouse&utm_medium=unknown).
> 
> | Library Version | Vulnerability Count | Highest Severity |
> | --- | --- | --- |
> | [Lo-Dash@1.3.0](https://snyk.io/vuln/npm:lodash?lh=1.3.0&utm_source=lighthouse&utm_medium=ref&utm_campaign=audit) | 3 | High |

---

_[View the full topic](https://meta.discourse.org/t/lo-dash-version-has-high-severity-security-vulnerability/117787)._