{"action":"Upgrade lodash to 4.17.12 or later.","affected":[{"fixed":"4.17.12","introduced":"0"}],"component":"lodash","cve_ids":["CVE-2019-10744"],"ecosystem":"npm","epss":0.05006,"exploited":false,"fixed_versions":["4.17.12"],"ghsa_id":"GHSA-jf85-cpcp-j695","id":"tcs_01M5KEKWBXPS9ES5C264N8WAPY","modified_at":"2026-09-10T03:47:55.238868631Z","published_at":"2019-07-10T19:45:23Z","references":["https://osv.dev/vulnerability/GHSA-jf85-cpcp-j695","https://nvd.nist.gov/vuln/detail/CVE-2019-10744","https://github.com/lodash/lodash/pull/4336","https://access.redhat.com/errata/RHSA-2019:3024","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2019-10744.yml","https://security.netapp.com/advisory/ntap-20191004-0005","https://snyk.io/vuln/SNYK-JS-LODASH-450202","https://support.f5.com/csp/article/K47105354?utm_source=f5support&amp%3Butm_medium=RSS","https://support.f5.com/csp/article/K47105354?utm_source=f5support&utm_medium=RSS","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-jf85-cpcp-j695","url":"https://osv.dev/vulnerability/GHSA-jf85-cpcp-j695"}],"summary":"Prototype Pollution in lodash"}