Package · RubyGems

lodash-rails

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.2

CVE-2021-23337 Public exploit Scanner template EPSS 20%

Command Injection

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

js-jquery lodash node-lodash node-lodash Debian Ubuntu Azure Linux npm RubyGems

Feb 15, 2021
High 7.4

CVE-2020-8203 Public exploit

Prototype Pollution in lodash

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

js-jquery lodash node-lodash node-lodash Debian Ubuntu Azure Linux npm RubyGems

Jul 15, 2020