Fix CVE-2026-4800: Update lodash to 4.18.x

Updates lodash from 4.17.23 to 4.18.1 across all projects to fix
CVE-2026-4800 (Code Injection via _.template imports key names).

Updated lockfiles:
- Nodejs/Tests/MockProjects/reactappwithjestteststypescript
- Nodejs/Tests/MockProjects/NodeAppWithAngularTests
- Nodejs/Tests/MockProjects/reactappwithjesttestsjavascript
- Root package-lock.json

S360 KPI: [SFI-ES5.2] 1ES Open Source Vulnerabilities

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: lucygramley

Nodejs/Tests/MockProjects/NodeAppWithAngularTests/package-lock.json

@@ -19,6 +19,7 @@
     "@angular/platform-browser": "^21.0.7",
     "@angular/platform-browser-dynamic": "^21.0.7",
     "@angular/router": "^21.0.7",
+    "lodash": "^4.18.1",
     "rxjs": "~7.8.1",
     "tslib": "^2.6.3",
     "zone.js": "~0.14.10"

Nodejs/Tests/MockProjects/NodeAppWithAngularTests/package.json

@@ -7,6 +7,7 @@
     "@testing-library/react": "^16.0.0",
     "@testing-library/user-event": "^14.5.2",
     "jest-editor-support": "^31.1.2",
+    "lodash": "^4.18.1",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "web-vitals": "^4.2.3"

Nodejs/Tests/MockProjects/reactappwithjesttestsjavascript/package-lock.json

@@ -11,6 +11,7 @@
     "@types/react": "^17.0.30",
     "@types/react-dom": "^17.0.9",
     "jest-editor-support": "^30.0.2",
+    "lodash": "^4.18.1",
     "react": "^17.0.2",
     "react-dom": "^17.0.2",
     "typescript": "^4.4.4",

Nodejs/Tests/MockProjects/reactappwithjesttestsjavascript/package.json

@@ -16,5 +16,8 @@
     "eslint-plugin-vue": "^6.0.1",
     "react": "^16.12.0",
     "typescript": "3.6.4"
+  },
+  "dependencies": {
+    "lodash": "^4.18.1"
   }
 }