Skip to content
OpenAdvisories

Package · PyPI

pydash

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.4
    CVE-2023-26145

    pydash Command Injection vulnerability

    This affects versions of the package pydash before 6.0.0. A number of pydash methods such as pydash.objects.invoke() and pydash.collections.invoke_map() accept dotted paths (Deep Path Strings) to target a nested Python object, relative to the original source …

    pydash PyPI