Package · RubyGems

lodash-rails

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 7.2

CVE-2021-23337 Public exploit Scanner template EPSS 20%

Command Injection

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

js-jquery lodash node-lodash node-lodash Debian Ubuntu Azure Linux npm RubyGems

Feb 15, 2021
High 7.4

CVE-2020-8203 Public exploit

Prototype Pollution in lodash

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

js-jquery lodash node-lodash node-lodash Debian Ubuntu Azure Linux npm RubyGems

Jul 15, 2020
Critical 9.1

CVE-2019-10744 Public exploit

Prototype Pollution in lodash

Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.

snyk lodash js-jquery lodash Debian Azure Linux npm RubyGems

Jul 25, 2019