Closed mend-bolt-for-github[bot] closed 5 years ago
Lodash modular utilities.
Library home page: https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz
Path to dependency file: /batimagen/package.json
Path to vulnerable library: /tmp/git/batimagen/node_modules/lodash/package.json
Dependency Hierarchy: - snyk-1.189.0.tgz (Root Library) - :x: **lodash-4.17.11.tgz** (Vulnerable Library)
Found in HEAD commit: 8ffa6931485ab67537327529dd72290783159077
A Prototype Pollution vulnerability was found in lodash through version 4.17.11.
Publish Date: 2019-07-08
URL: CVE-2019-10744
Base Score Metrics not available
Type: Upgrade version
Origin: https://github.com/lodash/lodash/pull/4336/commits/a01e4fa727e7294cb7b2845570ba96b206926790
Release Date: 2019-07-08
Fix Resolution: 4.17.12
Step up your Open Source Security Game with WhiteSource here
CVE-2019-10744 - High Severity Vulnerability
Lodash modular utilities.
Library home page: https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz
Path to dependency file: /batimagen/package.json
Path to vulnerable library: /tmp/git/batimagen/node_modules/lodash/package.json
Dependency Hierarchy: - snyk-1.189.0.tgz (Root Library) - :x: **lodash-4.17.11.tgz** (Vulnerable Library)
Found in HEAD commit: 8ffa6931485ab67537327529dd72290783159077
A Prototype Pollution vulnerability was found in lodash through version 4.17.11.
Publish Date: 2019-07-08
URL: CVE-2019-10744
Base Score Metrics not available
Type: Upgrade version
Origin: https://github.com/lodash/lodash/pull/4336/commits/a01e4fa727e7294cb7b2845570ba96b206926790
Release Date: 2019-07-08
Fix Resolution: 4.17.12
Step up your Open Source Security Game with WhiteSource here