WS-2020-0070 (High) detected in lodash-4.17.15.tgz

## WS-2020-0070 - High Severity Vulnerability
Vulnerable Library - lodash-4.17.15.tgz

Lodash modular utilities.

Library home page: https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz

Path to dependency file: /tmp/ws-scm/angular-libs/package.json

Path to vulnerable library: /tmp/ws-scm/angular-libs/node_modules/lodash/package.json

Dependency Hierarchy:
- cypress-4.7.0.tgz (Root Library)
- :x: **lodash-4.17.15.tgz** (Vulnerable Library)

Found in HEAD commit: ffac37386769bb38a67df625c1aefe74a2a0eebc

Vulnerability Details

a prototype pollution vulnerability in lodash. It allows an attacker to inject properties on Object.prototype

Publish Date: 2020-04-28

URL: WS-2020-0070

CVSS 3 Score Details (8.1)

Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: High
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High

For more information on CVSS3 Scores, click here.

***
Step up your Open Source Security Game with WhiteSource [here](https://www.whitesourcesoftware.com/full_solution_bolt_github)