CVE-2019-10744

9.1

CRITICALCVSS v3

Published

July 26, 2019

CVSS v2

6.4 MEDIUM

Affected

9 projects

Assigned by

[email protected]

Severity scale

010

Description

Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.

lodash

NPMLodash modular utilities.

< 4.17.12NVD

@types/lodash

NPMTypeScript definitions for lodash

< 4.17.12NVD

FGRibreau/lodash

GitHub

More on this CVE

NVD↗GitHub Advisory↗

:trumpet: My own version of lodash with extra mixins

< 4.17.12NVD

@sailshq/lodash

NPMA fork of Lodash 3.10.x with ongoing maintenance from the Sails core team.

< 4.17.12NVD

sailshq/lodash

GitHubA fork of Lodash 3.10.x with ongoing maintenance from the Sails core team. **There will be no changes or additions to existing usage. (That means no new features.)**

< 4.17.12NVD

treelinehq/lodash

GitHub

< 4.17.12NVD

lodash/lodash

GitHubA modern JavaScript utility library delivering modularity, performance, & extras.

< 4.17.12NVD

lodash

NuGet GalleryA utility library delivering consistency, modularity, performance, & extras.

< 4.17.12NVD

lodash

Python Package Indexpython implementation for lodash

< 4.17.12NVD

Security Advisories

CVE-2019-10744

Description

More on this CVE