{"affected":[{"product":"lodash","source":"CNA: hackerone","vendor":"n/a","versions":[{"status":"affected","version":"Not Fixed"}]}],"cveId":"CVE-2020-8203","cwes":["CWE-770"],"description":"Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.","epss":{"date":"2026-11-02","percentile":0.92502,"score":0.05213},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793642192515,"publishedAt":1594829427000,"references":[{"source":"CNA: hackerone","tags":["x_refsource_MISC"],"url":"https://hackerone.com/reports/712065"},{"source":"CNA: hackerone","tags":["x_refsource_MISC"],"url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"source":"CNA: hackerone","tags":["x_refsource_CONFIRM"],"url":"https://security.netapp.com/advisory/ntap-20200724-0006/"},{"source":"CNA: hackerone","tags":["x_refsource_MISC"],"url":"https://github.com/lodash/lodash/issues/4874"},{"source":"CNA: hackerone","tags":["x_refsource_MISC"],"url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"source":"CNA: hackerone","tags":["x_refsource_MISC"],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"source":"CNA: hackerone","tags":["x_refsource_MISC"],"url":"https://www.oracle.com/security-alerts/cpujan2022.html"},{"source":"CNA: hackerone","tags":["x_refsource_MISC"],"url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://hackerone.com/reports/712065"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"source":"ADP: CVE","tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://security.netapp.com/advisory/ntap-20200724-0006/"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://github.com/lodash/lodash/issues/4874"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/security-alerts/cpujan2022.html"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/security-alerts/cpuapr2022.html"}],"remediation":[],"revision":"80882f4e85a129a13c712275115b0dece99585f84d967488886873e7cfa4d1ad","sources":[{"modifiedAt":1793642192515,"name":"CNA: hackerone","retrievedAt":1793642922283,"url":"https://www.cve.org/CVERecord?id=CVE-2020-8203"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793642932132,"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-8203"}],"ssvc":{"assessedAt":1793642175725,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2020-8203","updatedAt":1793642932132}