{"action":"Upgrade lodash-amd to 4.17.11 or later.","affected":[{"fixed":"4.17.11","introduced":"4.7.0"}],"component":"lodash-amd","cve_ids":["CVE-2019-1010266"],"ecosystem":"npm","epss":0.03038,"exploited":false,"fixed_versions":["4.17.11"],"ghsa_id":"GHSA-x5rq-j2xg-h7qm","id":"tcs_01M5KEP5YCA2DZDWYK29VSJXTE","modified_at":"2026-09-10T03:48:25.206281974Z","published_at":"2019-07-19T16:13:07Z","references":["https://osv.dev/vulnerability/GHSA-x5rq-j2xg-h7qm","https://nvd.nist.gov/vuln/detail/CVE-2019-1010266","https://github.com/lodash/lodash/issues/3359","https://github.com/github/advisory-database/pull/6138","https://github.com/lodash/lodash/commit/5c08f18d365b64063bfbfa686cbb97cdd6267347","https://github.com/lodash/lodash","https://github.com/lodash/lodash/wiki/Changelog","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2019-1010266.yml","https://security.netapp.com/advisory/ntap-20190919-0004","https://snyk.io/vuln/SNYK-JS-LODASH-73639"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-x5rq-j2xg-h7qm#npm/lodash-amd","url":"https://osv.dev/vulnerability/GHSA-x5rq-j2xg-h7qm"}],"summary":"Regular Expression Denial of Service (ReDoS) in lodash"}