CVE-2019-10744 @ Npm-lodash-4.17.11

[CxFerris]

Vulnerable Package issue exists @ Npm-lodash-4.17.11 in branch main

A Prototype Pollution vulnerability was discovered in lodash before 4.17.12, in lodash.defaultsdeep before 4.6.1 and in @sailshq/lodash before 3.10.4. The function defaultsDeep allows a malicious user to modify the prototype of Object via {constructor: {prototype: {...}}} causing the addition or modification of an existing property that will exist on all objects.

Namespace: CxFerris
Repository: ast-advanced-lab
Repository Url: https://github.com/CxFerris/ast-advanced-lab
CxAST-Project: CxFerris/ast-advanced-lab
CxAST platform scan: 5484cc56-d08d-4bc3-b35a-e63a1ba28278
Branch: main
Application: ast-advanced-lab
Severity: HIGH
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-1321

---

Addition Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH
Remediation Upgrade Recommendation: 4.17.21

---

References
Disclosure
Advisory
Pull request
Commit
Commit
Advisory
Advisory