Lodash.defaultsdeep
This hub aggregates every CVE we track for Lodash.defaultsdeep, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
3
CVEs tracked
1
Critical
0
High
0
In CISA KEV
Severity distribution
CRITICAL1
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
2024-102026-09
Latest CVEs
The 3 most recently published vulnerabilities affecting Lodash.defaultsdeep.
- GHSA-46fh-8fc5-xcwxPrototype Pollution in lodash.defaultsdeep
- GHSA-h5mp-5q4p-ggf5Prototype Pollution in lodash.defaultsdeep
- CVE-2019-10744Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor p...9.1
Product normalization is registry-driven with AI assist and human review. How it works