VULNERABILITY INTELLIGENCE

CVE-2020-28500

CVSS score5.3 MEDIUM

EPSS probability7.34%

CISA KEVNot currently listed

Published2021-02-15

Last modified2026-10-08

Description

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.