lodash

Fixes 1 advisory that affected 4.17.11

• Critical
  Prototype Pollution in lodashGHSA-jf85-cpcp-j695 · 10 Jul 2019
  Fixed in 4.17.12

6 advisories affect 4.17.12; 4.18.0 fixes them

• High
  lodash vulnerable to Code Injection via `_.template` imports key namesGHSA-r5fr-rjxr-66jc · 1 Apr 2026
  Fixed in 4.18.0
• High
  Command Injection in lodashGHSA-35jh-r3h4-6jhm · 6 May 2021
  Fixed in 4.17.21
• High
  Prototype Pollution in lodashGHSA-p6mc-m468-83gw · 15 Jul 2020
  Fixed in 4.17.19
• Moderate
  lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`GHSA-f23m-r3pf-42rh · 1 Apr 2026
  Fixed in 4.18.0
• Moderate
  Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functionsGHSA-xxjr-mmjv-4gpg · 21 Jan 2026
  Fixed in 4.17.23