Skip to content
Sign in
5.3 Medium

CVE-2020-28500 Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim…

Description

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

Affected products and versions

Product Affected versions Fixed in
Lodash Versions not published

Other CVEs of Lodash

The 3 CVEs of Lodash →
CVE-2021-23337 Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function 7.2 High CVE-2020-8203 Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20 Not rated
Track this CVE