lodash kayıtları
lodash üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')3
- CWE-400 Uncontrolled Resource Consumption2
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-471 Modification of Assumed-Immutable Data (MAID)1
- CWE-770 Allocation of Resources Without Limits or Throttling1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2026-4800Kavram kanıtı | lodash vulnerable to Code Injection via `_.template` imports key nameslodash · lodash · CWE-94 | Kritik9,8 | — | %2,6 | 31 Mar 2026 |
38İzleyin | CVE-2019-10744Kavram kanıtı | Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution.lodash · lodash · CWE-1321 | Kritik9,1 | — | %5,0 | 25 Tem 2019 |
34İzleyin | CVE-2021-23337Kavram kanıtı | Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.lodash · lodash · CWE-94 | Yüksek7,2 | — | %21,3 | 15 Şub 2021 |
31İzleyin | CVE-2020-8203İstismar yok | Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.lodash · lodash · CWE-770 | Yüksek7,4 | — | %5,2 | 15 Tem 2020 |
28İzleyin | CVE-2025-13465Kavram kanıtı | Prototype Pollution Vulnerability in Lodash _.unset and _.omit functionslodash · lodash · CWE-1321 | Orta6,9 | — | %1,9 | 21 Oca 2026 |
27İzleyin | CVE-2019-1010266İstismar yok | lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption.lodash · lodash · CWE-400 | Orta6,5 | — | %3,2 | 17 Tem 2019 |
27İzleyin | CVE-2018-3721İstismar yok | lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and merlodash · lodash · CWE-471 | Orta6,5 | — | %2,4 | 6 Haz 2018 |
23İzleyin | CVE-2020-28500İstismar yok | Regular Expression Denial of Service (ReDoS)lodash · lodash | Orta5,3 | — | %7,3 | 15 Şub 2021 |
22İzleyin | CVE-2018-16487İstismar yok | A prototype pollution vulnerability was found in lodash <4.17.11 where the functions merge, mergeWith, and defaultsDeep can be tricked into lodash · lodash · CWE-400 | Orta5,6 | — | %1,6 | 1 Şub 2019 |
21İzleyin | CVE-2026-2950İstismar yok | lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`lodash · lodash · CWE-1321 | Orta5,3 | — | %0,4 | 31 Mar 2026 |
- CVE-2026-480040Planlayın
lodash vulnerable to Code Injection via `_.template` imports key names
KritikCVSS 9,8Kavram kanıtıEPSS %3lodash · lodash31 Mar 2026
- CVE-2019-1074438İzleyin
Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution.
KritikCVSS 9,1Kavram kanıtıEPSS %5lodash · lodash25 Tem 2019
- CVE-2021-2333734İzleyin
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
YüksekCVSS 7,2Kavram kanıtıEPSS %21lodash · lodash15 Şub 2021
- CVE-2020-820331İzleyin
Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.
YüksekCVSS 7,4İstismar yokEPSS %5lodash · lodash15 Tem 2020
- CVE-2025-1346528İzleyin
Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions
OrtaCVSS 6,9Kavram kanıtıEPSS %2lodash · lodash21 Oca 2026
- CVE-2019-101026627İzleyin
lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption.
OrtaCVSS 6,5İstismar yokEPSS %3lodash · lodash17 Tem 2019
- CVE-2018-372127İzleyin
lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and mer
OrtaCVSS 6,5İstismar yokEPSS %2lodash · lodash6 Haz 2018
- CVE-2020-2850023İzleyin
Regular Expression Denial of Service (ReDoS)
OrtaCVSS 5,3İstismar yokEPSS %7lodash · lodash15 Şub 2021
- CVE-2018-1648722İzleyin
A prototype pollution vulnerability was found in lodash <4.17.11 where the functions merge, mergeWith, and defaultsDeep can be tricked into
OrtaCVSS 5,6İstismar yokEPSS %2lodash · lodash1 Şub 2019
- CVE-2026-295021İzleyin
lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`
OrtaCVSS 5,3İstismar yokEPSS %0lodash · lodash31 Mar 2026