Snyk Lodash vulnerabilities

1 vulnerability

Known vulnerabilities in Snyk Lodash, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.1CVE-2019-10744debiannode-lodash+28
EPSS score
5.01%
Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.