VDB
DEBIAN-CVE-2020-28500
DEBIAN-CVE-2020-28500
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.
Risk Scores
CVSS v3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | node-lodash | 0, 0, 0 |
| Debian:12 | node-lodash | 0, 0, 0 |
| Debian:13 | node-lodash | 0, 0, 0 |
| Debian:11 | node-lodash | 0, 0, 0 |
Timeline
- Feb 15, 2021 CVE Published
- Apr 28, 2026 CVE Updated