next.js
Update vendored lodash to 4.17.23 to fix CVE-2025-13465
#91558

Merged

Update vendored lodash to 4.17.23 to fix CVE-2025-13465 #91558

eps1lon merged 2 commits into vercel:canary from denesbeck:fix/update-lodash-cve-2025-13465

Update vendored lodash to 4.17.23 to fix CVE-2025-13465

b5b4a885

nextjs-bot added type: next

Remove redundant overrides

19120edb

eps1lon assigned

eps1lon 92 days ago

eps1lon approved these changes on 2026-03-18

eps1lon enabled auto-merge (squash) 92 days ago

eps1lon merged 0cf61307 into canary 92 days ago

github-actions added locked

github-actions locked as resolved and limited conversation to collaborators 78 days ago

Reviewers

eps1lon

Assignees

eps1lon

Labels

type: next locked

Milestone

No milestone