You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
@useoptic/rulesets-base is using lodash.pick in version 4.4.0 which has a known security vulnerability. The lodash.pick package is also deprecated so there is no way mitigate the security issue.
To Reproduce
Steps to reproduce the behavior:
Install latest @useoptic/rulesets-base
Use a security scanner to analyze the dependencies
find that lodash.pick 4.4.0 has a security vulnerability
Expected behavior
@useoptic/rulesets-base doesn't ship with dependencies that have known security issues.