lodash

Fixes 1 advisory that affected 4.17.18

• High
  Prototype Pollution in lodashGHSA-p6mc-m468-83gw · 15 Jul 2020
  Fixed in 4.17.19

5 advisories affect 4.17.19; 4.18.0 fixes them

• High
  lodash vulnerable to Code Injection via `_.template` imports key namesGHSA-r5fr-rjxr-66jc · 1 Apr 2026
  Fixed in 4.18.0
• High
  Command Injection in lodashGHSA-35jh-r3h4-6jhm · 6 May 2021
  Fixed in 4.17.21
• Moderate
  lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`GHSA-f23m-r3pf-42rh · 1 Apr 2026
  Fixed in 4.18.0
• Moderate
  Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functionsGHSA-xxjr-mmjv-4gpg · 21 Jan 2026
  Fixed in 4.17.23
• Moderate
  Regular Expression Denial of Service (ReDoS) in lodashGHSA-29mw-wpgm-hmr9 · 6 Jan 2022
  Fixed in 4.17.21