UBUNTU-CVE-2020-8203

Details

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

Affected Packages

node-lodash

Ubuntu 16.04 LTS

Affected versions:

2.4.1+dfsg-3

node-lodash

Ubuntu 18.04 LTS

Affected versions:

4.17.4+dfsg-1

node-lodash

Ubuntu 20.04 LTS

Affected versions:

4.17.11+dfsg-44.17.15+dfsg-2

node-lodash

Ubuntu 22.04 LTS

Affected versions:

4.17.21+dfsg+~cs8.31.173-14.17.21+dfsg+~cs8.31.196.20210220-24.17.21+dfsg+~cs8.31.198.20210220-44.17.21+dfsg+~cs8.31.198.20210220-5

node-lodash

Ubuntu 24.04 LTSUbuntu 25.10

Affected versions:

4.17.21+dfsg+~cs8.31.198.20210220-9

References