Vulnerability Database
289,599
Total vulnerabilities in the database
CVE-2018-3721
lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an existing property that will exist on all objects.
| Software | From | Fixed in |
|---|---|---|
| lodash / lodash | - | 4.17.5 |
lodash
|
- | 4.17.5 |
| netapp / system_manager | 9.0 | 9.0.x |