Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2020/07/15 7:15 p.m.458 views

Prototype Pollution in lodash

Versions of lodash prior to 4.17.19 are vulnerable to Prototype Pollution. The functions pick, set, setWith, update, updateWith, and zipObjectDeep allow a malicious user to modify the prototype of Object if the property identifiers are user-supplied. Being affected by this issue requires...

7.4CVSS7.4AI score0.05213EPSS
SaveExploits1References12Affected Software8
Rows per page
Query Builder