This repository has been archived by the owner on Nov 21, 2022. It is now read-only.
CVE-2021-23337 (High) detected in lodash-4.17.15.tgz #64
Labels
security vulnerability
Security vulnerability detected by WhiteSource
CVE-2021-23337 - High Severity Vulnerability
Vulnerable Library - lodash-4.17.15.tgz
Lodash modular utilities.
Library home page: https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz
Dependency Hierarchy:
Found in HEAD commit: 19e4ba7763243b12401b6f588b261a6e9eb46424
Found in base branch: master
Vulnerability Details
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
Publish Date: 2021-02-15
URL: CVE-2021-23337
CVSS 3 Score Details (7.2)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Release Date: 2021-02-15
Fix Resolution (lodash): 4.17.21
Direct dependency fix Resolution (@angular/localize): 9.1.0
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: