Prototype Pollution

Overview lodash is a modern JavaScript utility library delivering modularity, performance, & extras. Affected versions of this package are vulnerable to Prototype Pollution through the zipObjectDeep function due to improper user input sanitization in the baseZipObject function. PoC...

The vulnerability of the _zipObjectDeep() method implementation in the Lodash library allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the zipObjectDeep method implementation in the Lodash library is related to the allocation of unlimited memory. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary code...