npm Update
2698Warning Date
Severity Level
Warning Number
Target Sector
5 October, 2021
● Critical
2021-3613
All
Description:
npm has released a security update to address a vulnerability in the following product:
- lodash
- <= 4.17.21
Threats:
Attacker could exploit this vulnerability by executing arbitrary code.
Best practice and Recommendations:
The CERT team encourages users to review npm security advisory and apply the necessary update: