Issues - morphadmin/lodash-bench - Morph

SIGN IN SIGN UP

morphadmin / lodash-bench

A modern JavaScript utility library delivering modularity, performance, & extras.

0 0 1163 JavaScript

Open Closed | Newest Most Voted

Labels Milestones New Issue

[Security] High severity findings summary

#4 opened 15d ago by bhaktateas

[Security Critical] _.template() compiles untrusted input as executable code (CVE-2021-23337 / CWE-94)

#3 opened 15d ago by bhaktateas

[Security] High severity findings summary

#2 opened 16d ago by bhaktateas

[Security Critical] _.template() uses new Function() — arbitrary code execution risk

#1 opened 16d ago by bhaktateas