CVE-2020-8203 Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20

Description

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Lodash	Versions non publiées

Autres CVE de Lodash

Les 3 CVE de Lodash →

CVE-2021-23337 Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function 7.2 Élevée CVE-2020-28500 Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim… 5.3 Moyenne