You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
lodash.set is a lodash method _.set exported as a Node.js module.
Affected versions of this package are vulnerable to Prototype Pollution via the setWith and set functions.
Can you assist?
Thanks
The text was updated successfully, but these errors were encountered:
Hi, I am using Snyk to find vulnerabilities in my code.
This is what I got from running the scan on my code:
lodash.set Prototype Pollution
VULNERABILITY
CWE-400
CVSS 7.3 HIGH
SNYK-JS-LODASHSET-1320032
SCORE
472
Introduced through
serverless-python-requirements@5.3.1
Detailed paths
Introduced through: chitom@1.0.0 › serverless-python-requirements@5.3.1 › lodash.set@4.3.2
Fix: No remediation path available.
Overview
lodash.set is a lodash method _.set exported as a Node.js module.
Affected versions of this package are vulnerable to Prototype Pollution via the setWith and set functions.
Can you assist?
Thanks
The text was updated successfully, but these errors were encountered: