Vulnerabilities

CVSS

5.3 Medium

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Risk score

42.4

Published

2021-02-15

Status

Modified

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

Coverage 1

threat-intel

Multiples vulnérabilités dans les produits IBM (17 juillet 2026)

Multiple vulnerabilities have been discovered in IBM products, including remote code execution, privilege escalation, and denial-of-service vulnerabilities. Several CVEs have been assigned, covering a wide range of IBM p…

CERT-FR · Jul 17, 2026 High

CVE-2020-28500CVE-2020-7760CVE-2020-8203vulnerabilitysupply-chainremote-code-execution

All articles mentioning it

Advisories and references

• cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
• github.com/lodash/lodash/blob/npm/trimEnd.js%23L8
• github.com/lodash/lodash/pull/5065
• security.netapp.com/advisory/ntap-20210312-0006/
• snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074896
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074894
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074892
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074895
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074893
• snyk.io/vuln/SNYK-JS-LODASH-1018905