We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Vulnerable Package issue exists @ Npm-lodash-4.17.11 in branch main
Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.
Namespace: James-AST Repository: msft Repository Url: https://github.com/James-AST/msft CxAST-Project: James-AST/msft CxAST platform scan: d217bf9e-499c-4ae8-a115-08b6cd62b182 Branch: main Application: msft Severity: HIGH State: NOT_IGNORED Status: RECURRENT CWE: CWE-1321
Addition Info Attack vector: NETWORK Attack complexity: HIGH Confidentiality impact: NONE Availability impact: HIGH Remediation Upgrade Recommendation: 4.17.21
References Advisory Pull request Commit Disclosure
The text was updated successfully, but these errors were encountered:
No branches or pull requests
Vulnerable Package issue exists @ Npm-lodash-4.17.11 in branch main
Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.
Namespace: James-AST
Repository: msft
Repository Url: https://github.com/James-AST/msft
CxAST-Project: James-AST/msft
CxAST platform scan: d217bf9e-499c-4ae8-a115-08b6cd62b182
Branch: main
Application: msft
Severity: HIGH
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-1321
Addition Info
Attack vector: NETWORK
Attack complexity: HIGH
Confidentiality impact: NONE
Availability impact: HIGH
Remediation Upgrade Recommendation: 4.17.21
References
Advisory
Pull request
Commit
Disclosure
The text was updated successfully, but these errors were encountered: