Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2026/04/01 11:50 p.m.•79 views

lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`

Impact Lodash versions 4.17.23 and earlier are vulnerable to prototype pollution in the .unset and .omit functions. The fix for CVE-2025-13465 only guards against string key members, so an attacker can bypass the check by passing array-wrapped path segments. This allows deletion of properties fro...

6.5CVSS5.9AI score0.00377EPSS
SaveExploits0References4Affected Software4
Rows per page
Query Builder