Prototype Pollution

Overview lodash is a modern JavaScript utility library delivering modularity, performance, & extras. Affected versions of this package are vulnerable to Prototype Pollution through the zipObjectDeep function due to improper user input sanitization in the baseZipObject function. PoC...

Lodash Heap Buffer Overflow DoS

The vulnerability of the zipObjectDeep method implementation in the Lodash library is related to the allocation of unlimited memory. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary code...