664 matches found
MAL-2025-192377 Malicious code in gs-uitk-lodash (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de2e606bc9fde8de540caf63cbded837e1bbbd7bc6bd2d477e38dcf89a76f0b The package gs-uitk-lodash was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-201719
Malicious code in gs-uitk-lodash npm...
PT-2026-29328
Name of the Vulnerable Software and Affected Versions Lodash versions prior to 4.18.0 Description Lodash versions 4.17.23 and earlier are susceptible to prototype pollution through the .unset and .omit functions. The initial fix did not fully address the issue, as an attacker can bypass the check...
Malicious code in eslint-lodash (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e5339ebcf037bec59b58b4622230d6f22619a009685877e469b566e883248a The package eslint-lodash was found to contain malicious code...
MAL-2025-191574 Malicious code in eslint-lodash (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e5339ebcf037bec59b58b4622230d6f22619a009685877e469b566e883248a The package eslint-lodash was found to contain malicious code...
EUVD-2019-0225
Malware in sbrugna...
EUVD-2021-0912
Malware in sbrugna...
EUVD-2022-0424
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2018-3721
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data MAID vulnerability via defaultsDeep, merge, and mergeWith functions, whic...
Linux Distros Unpatched Vulnerability : CVE-2021-23337
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function. CVE-2021-23337 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2020-8203
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prototype pollution attack when using .zipObjectDeep in lodash before 4.17.20. CVE-2020-8203 Note that Nessus relies on the presence of the package as reported ...
Linux Distros Unpatched Vulnerability : CVE-2018-16487
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A prototype pollution vulnerability was found in lodash 4.17.11 where the functions merge, mergeWith, and defaultsDeep can be tricked into adding or modifying...
Linux Distros Unpatched Vulnerability : CVE-2019-1010266
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack...
Linux Distros Unpatched Vulnerability : CVE-2020-28500
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions. CVE-2020-28500 Note...
Malicious code in lodash-fast (npm)
The package lodash-fast was found to contain malicious code...
Malicious code in lodash-simple (npm)
The package lodash-simple was found to contain malicious code...
Malicious code in lodash-g (npm)
The package lodash-g was found to contain malicious code...
MAL-2025-25503 Malicious code in lodash-fast (npm)
The package lodash-fast was found to contain malicious code...