Prototype Pollution flaw discovered in all versions of Lodash Library

guest · Jul 9, 2019

Prototype Pollution flaw discovered in all versions of Lodash Library
July 9, 2019
https://securityaffairs.co/wordpress/88162/hacking/lodash-prototype-pollution.html

Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.

Liran Tal, a developer advocate at Snyk, discovered a high-severity prototype pollution vulnerability, tracked as CVE-2019-10744, that affects all versions of Lodash.
The flaw could be exploited by hackers to compromise the security of affected services using the library.
The popular library is currently used in more than 4 million projects on GitHub.

“The popular npm library is used by 4.35 million projects on GitHub alone. Just shy of 40k GitHub project stars, the library is downloaded over 80 million times each month. Needless to say, a high severity vulnerability in a library as popular as lodash affects a large proportion of npm users.” reads a blog post published by the company.
Click to expand...

Log in or Sign up

Prototype Pollution flaw discovered in all versions of Lodash Library

guest Guest

Log in or Sign up

Prototype Pollution flaw discovered in all versions of Lodash Library

guest Guest

Useful Searches