chore: upgrade lodash when available

[sn0wcat]

there is a medium security vulnerability in a lodash function

Prototype Pollution
Vulnerable module: lodash
Introduced through: [email protected] and [email protected]
Detailed paths
Introduced through: @mindconnect/mindconnect-nodejs@mindsphere/mindconnect-nodejs#c6084de5bad0303d94b9d2104ecc6e29d53e5798 › [email protected]
Remediation: Open PR to patch [email protected].
Introduced through: @mindconnect/mindconnect-nodejs@mindsphere/mindconnect-nodejs#c6084de5bad0303d94b9d2104ecc6e29d53e5798 › [email protected] › [email protected]
Remediation: Open PR to patch [email protected].
Overview
lodash is a modern JavaScript utility library delivering modularity, performance, & extras.

Affected versions of this package are vulnerable to Prototype Pollution. The function zipObjectDeep can be tricked into adding or modifying properties of the Object prototype. These properties will be present on all objects.

This function is not used by the library. We ill upgrade lodash once the new lodash version is released.

lodash/lodash#4759

[sn0wcat]

https://snyk.io/test/github/mindsphere/mindconnect-nodejs?targetFile=package.json