From 369e7a4f47e67eb27afcbb91f88fb00b598942e0 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 5 Sep 2023 22:26:10 +0000 Subject: [PATCH] Publish GHSA-jf85-cpcp-j695 --- .../2019/07/GHSA-jf85-cpcp-j695/GHSA-jf85-cpcp-j695.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2019/07/GHSA-jf85-cpcp-j695/GHSA-jf85-cpcp-j695.json b/advisories/github-reviewed/2019/07/GHSA-jf85-cpcp-j695/GHSA-jf85-cpcp-j695.json index e0755966e40..59603d6dac1 100644 --- a/advisories/github-reviewed/2019/07/GHSA-jf85-cpcp-j695/GHSA-jf85-cpcp-j695.json +++ b/advisories/github-reviewed/2019/07/GHSA-jf85-cpcp-j695/GHSA-jf85-cpcp-j695.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-jf85-cpcp-j695", - "modified": "2021-08-17T17:55:46Z", + "modified": "2023-09-05T22:24:55Z", "published": "2019-07-10T19:45:23Z", "aliases": [ "CVE-2019-10744" ], "summary": "Prototype Pollution in lodash", - "details": "Versions of `lodash` before 4.17.12 are vulnerable to Prototype Pollution. The function `defaultsDeep` allows a malicious user to modify the prototype of `Object` via `{constructor: {prototype: {...}}}` causing the addition or modification of an existing property that will exist on all objects.\n\n\n\n\n## Recommendation\n\nUpdate to version 4.17.12 or later.", + "details": "Versions of `lodash` before 4.17.12 are vulnerable to Prototype Pollution. The function `defaultsDeep` allows a malicious user to modify the prototype of `Object` via `{constructor: {prototype: {...}}}` causing the addition or modification of an existing property that will exist on all objects.\n\n## Recommendation\n\nUpdate to version 4.17.12 or later.", "severity": [ { "type": "CVSS_V3",