Количество 8
Количество 8
CVE-2021-23358
The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.
CVE-2021-23358
The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.
CVE-2021-23358
The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.
CVE-2021-23358
Arbitrary Code Injection
CVE-2021-23358
The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 a ...
openSUSE-SU-2021:0601-1
Security update for nodejs-underscore
GHSA-cf4h-3jhx-xvhq
Arbitrary Code Execution in underscore
BDU:2022-06476
Уязвимость функции шаблона библиотеки JavaScript для работы с массивами Underscore, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-23358 The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized. | CVSS3: 3.3 | 4% Низкий | больше 5 лет назад |
 | CVE-2021-23358 The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized. | CVSS3: 7.2 | 4% Низкий | больше 5 лет назад |
 | CVE-2021-23358 The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized. | CVSS3: 3.3 | 4% Низкий | больше 5 лет назад |
 | CVE-2021-23358 Arbitrary Code Injection | 4% Низкий | 11 месяцев назад | |
| CVE-2021-23358 The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 a ... | CVSS3: 3.3 | 4% Низкий | больше 5 лет назад |
 | openSUSE-SU-2021:0601-1 Security update for nodejs-underscore | 4% Низкий | больше 5 лет назад | |
| GHSA-cf4h-3jhx-xvhq Arbitrary Code Execution in underscore | CVSS3: 9.8 | 4% Низкий | больше 5 лет назад |
 | BDU:2022-06476 Уязвимость функции шаблона библиотеки JavaScript для работы с массивами Underscore, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 7.2 | 4% Низкий | больше 5 лет назад |
Уязвимостей на страницу