Lodash Vulnerability Problem

rtfeldman / seamless-immutable

Immutable data structures for JavaScript which are backwards-compatible with normal JS Arrays and Objects.

BSD 3-Clause "New" or "Revised" License

5.37k stars 195 forks source link

Lodash Vulnerability Problem #274

Open enesdemir opened 5 years ago

enesdemir commented 5 years ago

Hi, Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.

Are there any way to update this version?