https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:10:43 +0000 https://vulnerability.circl.lu/vuln/ghsa-xxjr-mmjv-4gpg <p><strong>Affected:</strong> npm: lodash, npm: lodash.unset, npm: lodash-es, npm: lodash-amd</p> <p>### Impact</p> <p>Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the `_.unset` and `_.omit` functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.</p> <p>The issue permits deletion of properties but does not allow overwriting their original behavior.</p> <p>### Patches</p> <p>This issue is patched on 4.17.23.</p> <p><strong>Affected:</strong> npm: lodash, npm: lodash.unset, npm: lodash-es, npm: lodash-amd</p> <p>### Impact</p> <p>Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the `_.unset` and `_.omit` functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.</p> <p>The issue permits deletion of properties but does not allow overwriting their original behavior.</p> <p>### Patches</p> <p>This issue is patched on 4.17.23.</p> https://vulnerability.circl.lu/vuln/ghsa-xxjr-mmjv-4gpg