778 matches found
ROOT-APP-NPM-CVE-2025-13465 CVE-2025-13465 in lodash - Patched by Root
Root has patched CVE-2025-13465 in the lodash package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-2950 CVE-2026-2950 in lodash - Patched by Root
Root has patched CVE-2026-2950 in the lodash package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2021-23337 CVE-2021-23337 in lodash.template - Patched by Root
Root has patched CVE-2021-23337 in the lodash.template package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-4800 CVE-2026-4800 in lodash - Patched by Root
Root has patched CVE-2026-4800 in the lodash package for Root:npm. Multiple fixed versions available...
CVE-2023-22621-POC
CVE-2023-22621-POC CVE-2023-22621: SSTI a RCE explotando plantillas de correo electrónico que afecta a las versiones de Strapi return strapi.config.get'plugin.email'; ; const send = async options = return strapi.plugin'email'.provider.sendoptions; ; / fill subject, text and html using lodash...
[SECURITY] [DLA 4820-1] node-lodash security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-4820-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta October 05, 2026 https://wiki.debian.org/LTS -...
Lodash Template - Server-Side Template Injection (RCE)
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function. id: CVE-2021-23337 info: name: Lodash Template - Server-Side Template Injection RCE author: DhiyaneshDk severity: high description: | Lodash versions prior to 4.17.21 are vulnerable to Command Injectio...
CVE-2026-4800-POC
CVE-2026-4800-POC Aviso de Seguridad https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc POC const = require'lodash'; Object.prototype.imports = 'x=process.getBuiltinModule"childprocess".execSync"curl https://example.com"':undefined .template'', ; Flujo Usar una vulnerabilida...
nextjs-lodash-cve-2025-13465-repro
Este es un proyecto de Next.js iniciado con create-next-app. Comenzando Primero, ejecuta el servidor de desarrollo: npm run dev or yarn dev or pnpm dev or bun dev Abre http://localhost:3000 en tu navegador para ver el resultado. Puedes empezar a editar la página modificando app/page.tsx. La págin...
Rocky Linux 9 [CIQ] Security Update: pcs / pcs-snmp (crlsa-2026_10710)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202610710 advisory. lodash: lodash: Arbitrary code execution via untrusted input in template imports CVE-2026-4800 Tenable has extracted the preceding description block directly from...
Rocky Linux 10.2 [CIQ] Security Update: linux-sgx-debuginfo / linux-sgx-debugsource / sgx-common / sgx-libs / etc Multiple Vulnerabilities (crlsa-2026_18480)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202618480 advisory. qs: qs: Denial of Service via improper input validation in array parsing CVE-2025-15284 node-tar: tar: node-tar: Arbitrary file overwrite and symlink...
Rocky Linux 9 [CIQ] Security Update: linux-sgx-debuginfo / linux-sgx-debugsource / sgx-common / sgx-libs / etc Multiple Vulnerabilities (crlsa-2026_18868)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202618868 advisory. qs: qs: Denial of Service via improper input validation in array parsing CVE-2025-15284 node-tar: tar: node-tar: Arbitrary file overwrite and symlink...
Rocky Linux 9 [CIQ] Security Update: pcs / pcs-snmp (crlsa-2026_19167)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202619167 advisory. lodash: lodash: Arbitrary code execution via untrusted input in template imports CVE-2026-4800 Tenable has extracted the preceding description block directly from...
Rocky Linux 9 [CIQ] Security Update: pcs / pcs-snmp (crlsa-2026_2452)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20262452 advisory. lodash: prototype pollution in .unset and .omit functions CVE-2025-13465 Tenable has extracted the preceding description block directly from the CIQ security...
Rocky Linux 10.2 [CIQ] Security Update: cockpit-image-builder Multiple Vulnerabilities (crlsa-2026_24331)
The Rocky Linux 10.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202624331 advisory. lodash: prototype pollution in .unset and .omit functions CVE-2025-13465 lodash: lodash: Arbitrary code execution via untrusted input in template impor...
Security Bulletin: Vulnerabilities in Netty.Spring WebFlux,Spring Framework,Bootstrap,Angular,Lodash,spring-security-config,Underscore might affect IBM Storage Defender Copy Data Management
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty.Spring WebFlux,Spring Framework,Bootstrap,Angular,Lodash,spring-security-config. Vulnerabilities include an escalation attack exchanging a known session ID for that of an authenticated user, Denial of...
Security Bulletin: IBM Optim 1.1.0 impacted by vulnerability in lodash-es 4.17.21
Summary IBM Optim 1.1.0 includes lodash-es 4.17.21 as an npm dependency in the archon-ui component. This version is affected by CVE-2025-13465, a prototype pollution vulnerability that allows a remote attacker to manipulate JavaScript object prototypes via specially crafted input, potentially...
IBM Cognos Analytics 12.0.4 < 12.0.4 FP3 / 12.1.x < 12.1.3 FP2 Multiple Vulnerabilities (7287209)
The version of IBM Cognos Analytics installed on the remote host is 12.0.4 prior to 12.0.4 FP3, or 12.1.x prior to 12.1.3 FP2. It is, therefore, affected by multiple vulnerabilities as referenced in the IBM Security Bulletin No. 7287209: - NLTK versions 3.9.2 and prior are vulnerable to arbitrary...
