Lodahs Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Lodahs Project records in CISA KEV

No Lodahs Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2019-14247 CVE-2019-19771 · GHSA-hm6q-r2jc-cpqh

MEDIUM 41

The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01257 Published 2019-12-12 No fix listed CWE-506