From ef11c17384942453a9934b7031ea2f6056611fa1 Mon Sep 17 00:00:00 2001
From: Vesa Luusua <vesa.luusua@gmail.com>
Date: Thu, 29 Aug 2019 16:14:49 +0300
Subject: [PATCH 1/2] Fix lodash vulnerability: force newer version for
 react-google-maps and react-dates

---
 package.json | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/package.json b/package.json
index 7d44c271..87eca385 100644
--- a/package.json
+++ b/package.json
@@ -66,6 +66,8 @@
     "prettier": "^1.18.2"
   },
   "resolutions": {
+    "react-dates/lodash": "^4.17.14",
+    "react-google-maps/lodash": "^4.17.14",
     "react-test-renderer": "^16.9.0"
   },
   "scripts": {

From d85bb55f4fadf71bb7ec2b922bf1db40e5da1af2 Mon Sep 17 00:00:00 2001
From: Vesa Luusua <vesa.luusua@gmail.com>
Date: Thu, 29 Aug 2019 16:21:31 +0300
Subject: [PATCH 2/2] Update changelog

---
 CHANGELOG.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5b04aaf5..7d6c9ce4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,8 @@ way to update this template, but currently, we follow a pattern:
 
 ## Upcoming version 2019-XX-XX
 
+- [fix] Lodash vulnerability: enforce newer version for react-google-maps and react-dates
+  [#1188](https://github.com/sharetribe/flex-template-web/pull/1188)
 - [change] Update `React`, `react-test-renderer` and `react-dom` to 16.9.0. After these updates old
   lifecycle methods `componentWillMount`, `componentWillUpdate` and `componentWillUpdate` will cause
   deprecation warnings. Check the updated components from the PR