Skip to content
OpenAdvisories

Product · HackerOne

lodash node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2018-3721

    Prototype Pollution in lodash

    lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition…

    HackerOne lodash node module node-lodash lodash Debian Ubuntu npm RubyGems