Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2018-3721

lodash: Prototype pollution in utilities function

lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.

CVSS 3.1 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Lodash Netapp Redhat
Products
Lodash Active Iq Unified Manager System Manager and 1 more