Skip to content
OpenAdvisories

Archive

25 July 2019

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2019-10744 Public exploit

    Prototype Pollution in lodash

    Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.