Most recent entries from all

cnvd-2021-90768

fkie_cve-2021-41720

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

Withdrawn: GHSA-8p5q-j9m2-g8wr — Withdrawn: Arbitrary code execution in lodash

Withdrawn by the publisher.

Affected: npm: lodash

# Withdrawn

GitHub has chosen to publish this CVE as a withdrawn advisory due to it not being a security issue. See [this issue](https://github.com/lodash/lodash/issues/5261) for more details.

# CVE description

"** DISPUTED ** A command injection vulnerability in Lodash 4.17.21 allows attackers to achieve arbitrary code execution via the template function. This is a different parameter, method, and version than CVE-2021-23337. NOTE: the vendor's position is that it's the developer's responsibility to ensure that a template does not evaluate code that originates from untrusted input.

gsd-2021-41720

Withdrawn: UBUNTU-CVE-2021-41720

Withdrawn by the publisher.

Affected: Ubuntu:Pro:16.04:LTS: node-lodash

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.