From c1822f3719755e58cf9e76b15fc545bbe446a5f5 Mon Sep 17 00:00:00 2001
From: Artur <arturcic@gmail.com>
Date: Thu, 20 May 2021 11:13:35 +0200
Subject: [PATCH] fix CVE-2021-23358

---
 package-lock.json | 37 +++++++++++++++++++------------------
 package.json      |  1 +
 2 files changed, 20 insertions(+), 18 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 0a2692d..4ffef47 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -32,6 +32,7 @@
                 "tfx-cli": "^0.9.2",
                 "ts-loader": "^9.2.1",
                 "typescript": "^4.2.4",
+                "underscore": ">=1.12.1",
                 "webpack": "^5.37.1",
                 "webpack-cli": "^4.7.0"
             }
@@ -570,6 +571,12 @@
                 "underscore": "1.8.3"
             }
         },
+        "node_modules/azure-devops-node-api/node_modules/underscore": {
+            "version": "1.8.3",
+            "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz",
+            "integrity": "sha1-Tz+1OxBuYJf8+ctBCfKl6b36UCI=",
+            "dev": true
+        },
         "node_modules/azure-pipelines-task-lib": {
             "version": "3.1.2",
             "resolved": "https://registry.npmjs.org/azure-pipelines-task-lib/-/azure-pipelines-task-lib-3.1.2.tgz",
@@ -3471,11 +3478,6 @@
                 "node": ">=0.6.11 <=0.7.0 || >=0.7.3"
             }
         },
-        "node_modules/typed-rest-client/node_modules/underscore": {
-            "version": "1.13.0",
-            "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.0.tgz",
-            "integrity": "sha512-sCs4H3pCytsb5K7i072FAEC9YlSYFIbosvM0tAKAlpSSUgD7yC1iXSEGdl5XrDKQ1YUB+p/HDzYrSG2H2Vl36g=="
-        },
         "node_modules/typedarray": {
             "version": "0.0.6",
             "resolved": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz",
@@ -3507,10 +3509,9 @@
             }
         },
         "node_modules/underscore": {
-            "version": "1.8.3",
-            "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz",
-            "integrity": "sha1-Tz+1OxBuYJf8+ctBCfKl6b36UCI=",
-            "dev": true
+            "version": "1.13.1",
+            "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.1.tgz",
+            "integrity": "sha512-hzSoAVtJF+3ZtiFX0VgfFPHEDRm7Y/QPjGyNo4TVdnDTdft3tr8hEkD25a1jC+TjTuE7tkHGKkhwCgs9dgBB2g=="
         },
         "node_modules/uri-js": {
             "version": "4.2.2",
@@ -4523,6 +4524,12 @@
                         "tunnel": "0.0.4",
                         "underscore": "1.8.3"
                     }
+                },
+                "underscore": {
+                    "version": "1.8.3",
+                    "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz",
+                    "integrity": "sha1-Tz+1OxBuYJf8+ctBCfKl6b36UCI=",
+                    "dev": true
                 }
             }
         },
@@ -6932,11 +6939,6 @@
                     "version": "0.0.6",
                     "resolved": "https://registry.npmjs.org/tunnel/-/tunnel-0.0.6.tgz",
                     "integrity": "sha512-1h/Lnq9yajKY2PEbBadPXj3VxsDDu844OnaAo52UVmIzIvwwtBPIuNvkjuzBlTWpfJyUbG3ez0KSBibQkj4ojg=="
-                },
-                "underscore": {
-                    "version": "1.13.0",
-                    "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.0.tgz",
-                    "integrity": "sha512-sCs4H3pCytsb5K7i072FAEC9YlSYFIbosvM0tAKAlpSSUgD7yC1iXSEGdl5XrDKQ1YUB+p/HDzYrSG2H2Vl36g=="
                 }
             }
         },
@@ -6964,10 +6966,9 @@
             }
         },
         "underscore": {
-            "version": "1.8.3",
-            "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz",
-            "integrity": "sha1-Tz+1OxBuYJf8+ctBCfKl6b36UCI=",
-            "dev": true
+            "version": "1.13.1",
+            "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.1.tgz",
+            "integrity": "sha512-hzSoAVtJF+3ZtiFX0VgfFPHEDRm7Y/QPjGyNo4TVdnDTdft3tr8hEkD25a1jC+TjTuE7tkHGKkhwCgs9dgBB2g=="
         },
         "uri-js": {
             "version": "4.2.2",
diff --git a/package.json b/package.json
index bd259fd..4dab756 100644
--- a/package.json
+++ b/package.json
@@ -49,6 +49,7 @@
         "tfx-cli": "^0.9.2",
         "ts-loader": "^9.2.1",
         "typescript": "^4.2.4",
+        "underscore": ">=1.12.1",
         "webpack": "^5.37.1",
         "webpack-cli": "^4.7.0"
     }