Questions tagged [npm]

npm is a package manager for Node.js

Filter by
Sorted by
Tagged with
5
votes
1answer
2k views

How to deal with prototype pollution attack vulnerability in lodash?

lodash has been reported to be vulnerable to the so called prototype pollution attack in versions up to (excluding) 4.17.5 See https://nvd.nist.gov/vuln/detail/CVE-2018-3721 Now lodash is the most ...