6 ms·
looking at the latest illissued lodash CVE they seem to deliver CVEs that are withdrawn in GH Advisory Database
by valkum 5y ago
looking at the latest illissued lodash CVE they seem to deliver CVEs that are withdrawn in GH Advisory Database
- ethomson 5y agoProduct Manager for npm here. That was correct. As part of our integration, we were not excluding withdrawn advisories. We've since corrected this. Apologies!