2 matches found
PT-2019-2936
Name of the Vulnerable Software and Affected Versions lodash versions prior to 4.17.12 Description The issue is related to the defaultsDeep function in the lodash library, which can be tricked into adding or modifying properties of Object.prototype using a constructor payload. This is due to...