CVE-2020-8203 Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20

Description

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

Affected products and versions

Product	Affected versions	Fixed in
Lodash	Versions not published

Other CVEs of Lodash

The 3 CVEs of Lodash →

CVE-2021-23337 Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function 7.2 High CVE-2020-28500 Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim… 5.3 Medium