Lodash is a JavaScript library.
Questions tagged [lodash]
1 questions
5
votes
1 answer
How to deal with prototype pollution attack vulnerability in lodash?
lodash has been reported to be vulnerable to the so called prototype pollution attack in versions up to (excluding) 4.17.5
See https://nvd.nist.gov/vuln/detail/CVE-2018-3721
Now lodash is the most depended upon package in the JavaScript eco system.…
borisdiakur
- 153
- 1
- 5