[rwth-security] Unpatched Prototype Pollution Flaw Affects All Versions of Popular Lodash Library

Hallo zusammen,

sofern nicht selber schon gesehen/-lesen hier [0] FYI

"Unpatched Prototype Pollution Flaw Affects All Versions of Popular Lodash Library"

"... a popular npm library used by more than 4 million projects on GitHub alone, is affected by a high severity security vulnerability that could allow attackers to compromise the security of affected services using the library and their respective user base ..."

--> affects all versions of lodash, including the latest version 4.17.11.

VG

Bernd

[0] https://thehackernews.com/2019/07/lodash-prototype-pollution.html