# La versione di Lo-dash presenta una vulnerabilità di sicurezza di gravità elevata

**URL:** <https://meta.discourse.org/t/lo-dash-version-has-high-severity-security-vulnerability/117787>\
**Category:** Product Support\
**Created:** [15 Maggio 2019, 9:53am UTC](https://meta.discourse.org/t/lo-dash-version-has-high-severity-security-vulnerability/117787 "2019-05-15T09:53:38Z")\
**Posts on this page:** 1\
**Showing post:** 11

<div class="post-metadata">

**Author:** ![j.jaffeux](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/j.jaffeux/32/60297_2.png) [@j.jaffeux](https://meta.discourse.org/u/j.jaffeux)\
**Post date:** [17 Maggio 2019, 5:42am UTC](https://meta.discourse.org/t/lo-dash-version-has-high-severity-security-vulnerability/117787/11 "2019-05-17T05:42:45Z")

</div>

Ok I go tricked by a combination of things…

Most notably `yarn global add` will 4.17.5 no matter what… You have to install it from git repo:

```plaintext
➜ Projects yarn global add https://github.com/lodash-archive/lodash-cli
yarn global v1.16.0
[1/4] 🔍 Resolving packages...
[2/4] 🚚 Fetching packages...
[3/4] 🔗 Linking dependencies...
[4/4] 🔨 Building fresh packages...
success Installed "lodash-cli@4.17.11" with binaries:
      - lodash
✨ Done in 5.90s.

```

Will be fixed by:

[https://github.com/discourse/discourse/pull/7565/commits](https://github.com/discourse/discourse/pull/7565/commits)

Thanks.

---

_[View the full topic](https://meta.discourse.org/t/lo-dash-version-has-high-severity-security-vulnerability/117787)._