Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-r5fr-rjxr-66jc
  • npm/lodash
  • npm/lodash-amd
  • npm/lodash-es
  • npm/lodash.template
 lodash vulnerable to Code Injection via `_.template` imports key names 01 Apr
  • Fix available
  • Severity - 8.1 (High)
GHSA-f23m-r3pf-42rh
  • npm/lodash
  • npm/lodash-amd
  • npm/lodash-es
  • npm/lodash.unset
 lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` 01 Apr
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-xxjr-mmjv-4gpg
  • npm/lodash
  • npm/lodash-amd
  • npm/lodash-es
  • npm/lodash.unset
 Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions 21 Jan
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-29mw-wpgm-hmr9
  • RubyGems/lodash-rails
  • npm/lodash
  • npm/lodash-es
  • npm/lodash.trim
  • npm/lodash.trimend
 Regular Expression Denial of Service (ReDoS) in lodash 06 Jan 2022
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-35jh-r3h4-6jhm
  • RubyGems/lodash-rails
  • npm/lodash
  • npm/lodash-es
  • npm/lodash-template
  • npm/lodash.template
 Command Injection in lodash 06 May 2021
  • Fix available
  • Severity - 7.2 (High)
GHSA-p6mc-m468-83gw
  • RubyGems/lodash-rails
  • npm/lodash
  • npm/lodash-es
  • npm/lodash.pick
  • npm/lodash.set
  • ... 3 more
 Prototype Pollution in lodash 15 Jul 2020
  • Fix available
  • Severity - 7.4 (High)
GHSA-x5rq-j2xg-h7qm
  • RubyGems/lodash-rails
  • npm/lodash
  • npm/lodash-amd
  • npm/lodash-es
 Regular Expression Denial of Service (ReDoS) in lodash 19 Jul 2019
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-jf85-cpcp-j695
  • RubyGems/lodash-rails
  • npm/lodash
  • npm/lodash-amd
  • npm/lodash-es
  • npm/lodash.defaultsdeep
 Prototype Pollution in lodash 10 Jul 2019
  • Fix available
  • Severity - 9.1 (Critical)