CVE-2021-23337 Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function

Description

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Lodash	Versions non publiées

Autres CVE de Lodash

Les 3 CVE de Lodash →

CVE-2020-28500 Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim… 5.3 Moyenne CVE-2020-8203 Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20 Non notée