request #47570 lodash, lodash-es: 4.17.23 -> 4.18.1

Infos

Artifact ID#47570

Submitted byJoris MASSON (jmasson)

Last Modified On2026-04-08 08:44

Submitted on2026-04-07 15:59

Rank49297

Details

Summary *

lodash, lodash-es: 4.17.23 -> 4.18.1

Original Submission

It fixes CVE-2026-2950 (See advisory) and CVE-2026-4800 (See advisory).

Tuleap might be affected through the API explorer component as it uses the omit function.

Releases:

Changelog: https://github.com/lodash/lodash/wiki/Changelog#v4181

CategoryAPI

Reported in versionEmpty

PlatformEmpty

Is an Enhancement or an internal improvement?

[ ] enhancement
[ ] internal improvement

CC listEmpty

Stage

Assigned toJoris MASSON (jmasson)

StatusClosed

Close date2026-04-08

Attachments

AttachmentsEmpty

References

Cross references

Show items referenced by request #47570

Referenced by request #47570

Artifact

rel #47138 17.6

Other

gerrit #37350

Follow-ups

Thomas Gerbet (tgerbet)

2026-04-08 08:44

Connected artifacts
- Added Fixed in: rel #47138

Tracker Workflow Manager (forge__tracker_workflow_manager)

2026-04-08 08:44

Closed by @jmasson with git #tuleap/tuleap/aaec43449c7c15e4ed586c61f858f481964b4600.

Status changed from Under review to Closed
Close date set to 2026-04-08

Joris MASSON (jmasson)

2026-04-07 16:49

See gerrit #37350

Status changed from Under implementation to Under review

Public

Referenced by request #47570

Artifact

Other

Follow-ups