Lucene search
+L

1 matches found

OSV
OSV
added 2022/01/06 8:30 p.m.20 views

GHSA-29MW-WPGM-HMR9 Regular Expression Denial of Service (ReDoS) in lodash

All versions of package lodash prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions. Steps to reproduce provided by reporter Liyuan Chen: js var lo = require'lodash'; function buildblankn var ret = "1" for var i = 0; i n; i++ r...

5.3CVSS6.9AI score0.07336EPSS
SaveExploits1References20
Rows per page
Query Builder