[Snyk: High] Command Injection (due 3/19/21)

[lbeaufort]

Command Injection

Vulnerable module: lodash
Introduced through: [email protected]
Exploit maturity: Proof of concept
Detailed paths
Introduced through: [email protected] › [email protected] › [email protected]
Remediation: No remediation path available.
Introduced through: [email protected] › [email protected] › [email protected] › [email protected]
Remediation: No remediation path available.
Introduced through: [email protected] › [email protected] › [email protected] › [email protected]
Remediation: No remediation path available but possible PR in progress: lodash/lodash#5085

Overview
lodash is a modern JavaScript utility library delivering modularity, performance, & extras.

Affected versions of this package are vulnerable to Command Injection via template.

Completion criteria:

• Determine whether this is necessary work and make recommendations as necessary to address