description: A prototype pollution vulnerability was found in lodash <4.17.11 where the functions merge, mergeWith, and defaultsDeep can be tricked into adding or modifying properties of Object.prototype.
problem types: Denial of Service (CWE-400)
affected:
{
product: lodash
vendor: HackerOne
versions:
status: affected, version: <4.7.11
}