Vulnerabilities (CVE)

Filtered by vendor Lodash Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-23337 3 Lodash, Netapp, Oracle 20 Lodash, Active Iq Unified Manager, Cloud Manager and 17 more 2022-07-25 6.5 MEDIUM 7.2 HIGH
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
CVE-2020-8203 2 Lodash, Oracle 18 Lodash, Banking Corporate Lending Process Management, Banking Credit Facilities Process Management and 15 more 2022-05-12 5.8 MEDIUM 7.4 HIGH
Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.