Medium · published February 15, 2021
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.
| Product | Versions | Fixed in |
|---|---|---|
| lodash/lodash | < 4.17.21 | 4.17.21 |
| oracle/banking_corporate_lending_process_management | all versions | — |
| oracle/banking_corporate_lending_process_management | all versions | — |
| oracle/banking_corporate_lending_process_management | all versions | — |
| oracle/banking_credit_facilities_process_management | all versions | — |
| oracle/banking_credit_facilities_process_management | all versions | — |
| oracle/banking_credit_facilities_process_management | all versions | — |
| oracle/banking_extensibility_workbench | all versions | — |
| oracle/banking_extensibility_workbench | all versions | — |
| oracle/banking_extensibility_workbench | all versions | — |
| oracle/banking_supply_chain_finance | all versions | — |
| oracle/banking_supply_chain_finance | all versions | — |
| oracle/banking_supply_chain_finance | all versions | — |
| oracle/banking_trade_finance_process_management | all versions | — |
| oracle/banking_trade_finance_process_management | all versions | — |
| oracle/banking_trade_finance_process_management | all versions | — |
| oracle/communications_cloud_native_core_policy | all versions | — |
| oracle/communications_design_studio | all versions | — |
| oracle/communications_services_gatekeeper | all versions | — |
| oracle/communications_session_border_controller | all versions | — |
| oracle/communications_session_border_controller | all versions | — |
| oracle/enterprise_communications_broker | all versions | — |
| oracle/enterprise_communications_broker | all versions | — |
| oracle/financial_services_crime_and_compliance_management_studio | all versions | — |
| oracle/financial_services_crime_and_compliance_management_studio | all versions | — |
| oracle/health_sciences_data_management_workbench | all versions | — |
| oracle/health_sciences_data_management_workbench | all versions | — |
| oracle/jd_edwards_enterpriseone_tools | < 9.2.6.1 | 9.2.6.1 |
| oracle/peoplesoft_enterprise_peopletools | all versions | — |
| oracle/peoplesoft_enterprise_peopletools | all versions | — |
| oracle/primavera_gateway | ≥ 17.12.0, ≤ 17.12.11 | — |
| oracle/primavera_gateway | ≥ 18.8.0, ≤ 18.8.12 | — |
| oracle/primavera_gateway | ≥ 19.12.0, ≤ 19.12.11 | — |
| oracle/primavera_gateway | ≥ 20.12.0, ≤ 20.12.7 | — |
| oracle/primavera_unifier | ≥ 17.7, ≤ 17.12 | — |
| oracle/primavera_unifier | all versions | — |
| oracle/primavera_unifier | all versions | — |
| oracle/primavera_unifier | all versions | — |
| oracle/retail_customer_management_and_segmentation_foundation | all versions | — |
| siemens/sinec_ins | < 1.0 | 1.0 |
| siemens/sinec_ins | all versions | — |
| siemens/sinec_ins | all versions | — |