This repository was archived by the owner on Mar 12, 2025. It is now read-only.

This repository was archived by the owner on Mar 12, 2025. It is now read-only.

Lodash Vulnerability Problem #274

Open

opened

on Sep 29, 2019

Hi,
Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.

Are there any way to update this version?

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests