CVE-2021-23337 Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function

Description

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

Affected products and versions

Product	Affected versions	Fixed in
Lodash	Versions not published

Other CVEs of Lodash

The 3 CVEs of Lodash →

CVE-2020-28500 Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim… 5.3 Medium CVE-2020-8203 Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20 Not rated