@across-ui/example (>=0.0.1-alpha.4, <=0.0.4-alpha.5), @admui/grid (>=0.1.10, <=0.3.1) +806 more potentially affected by CVE-2020-28500 via lodash-es (>=4.0.0, <=4.17.20)

🗓️ 16 Oct 2020 16:47:34Reported by Vulners OSVType

vulnersosv🔗 security.snyk.io👁 2 Views

lodash-es <=4.17.20 vulnerable to prototype pollution via CVE-2020-28500 affecting 800+ dependent packages.

Reporter	Title	Published	Views	Family All 111
IBM Security Bulletins	Security Bulletin: CVE-2020-28500	8 Jul 202219:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities	18 Jul 202306:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by multiple vulnerabilities in Drupal dated modernizr library	25 Aug 202114:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by multiple vulnerabilities	19 Jun 202517:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities	10 Jul 202416:31	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of the lodash library	17 Apr 202613:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM DB2 affects IBM Application Performance Management products.	13 Sep 202307:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities CVE-2020-28500, CVE-2021-23337, CVE-2020-8203	24 Apr 202315:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilties in IBM Rational Functional Tester / DevOps Test UI	4 Jun 202619:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is affected by Node.js vulnerability	22 Jun 202116:04	–	ibm

11 Mar 2024 09:53Current

6.2Medium risk

Vulners AI Score6.2

CVSS 25

CVSS 3.15.3

EPSS0.07336

lodash-es prototype pollution CVE-2020-28500 transitive dependency npm packages security advisory vulnerability scan