Update feathers-vuex to 2.x.x
nothingismagick opened this issue · comments
Previously in 1.x.x lodash.merge was being used. There are issues with that that have since been resolved. Please see:
feathersjs-ecosystem/feathers-vuex#213
✗ Medium severity vulnerability found in lodash.merge
Description: Prototype Pollution
Info: https://snyk.io/vuln/SNYK-JS-LODASHMERGE-173733
Introduced through: feathers-vuex@1.7.0
From: feathers-vuex@1.7.0 > lodash.merge@4.6.1
✗ High severity vulnerability found in lodash.merge
Description: Prototype Pollution
Info: https://snyk.io/vuln/SNYK-JS-LODASHMERGE-173732
Introduced through: feathers-vuex@1.7.0
From: feathers-vuex@1.7.0 > lodash.merge@4.6.1
Latest at the time of this writing is v2.0.0-pre.24
https://github.com/feathers-plus/feathers-vuex/releases