typemoq-2.1.0.tgz: 1 vulnerabilities (highest severity is: 9.8) [master]

[mend-developer-platform-dev]

📂 Vulnerable Library - typemoq-2.1.0.tgz

A simple mocking library for TypeScript

Path to dependency file: /frontend/package.json

Path to vulnerable library: /frontend/node_modules/typemoq/package.json

Findings

Finding	Severity	🎯 CVSS	Exploit Maturity	EPSS	Library	Type	Fixed in	Remediation Available	Reachability
CVE-121740-819191	🟣 Critical	9.8	N/A	N/A	lodash-4.17.21.tgz	Transitive	N/A	❌

Details

🟣CVE-121740-819191

Vulnerable Library - lodash-4.17.21.tgz

Lodash modular utilities.

Library home page: https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz

Path to dependency file: /frontend/package.json

Path to vulnerable library: /frontend/node_modules/lodash/package.json

Dependency Hierarchy:

• typemoq-2.1.0.tgz (Root Library)
  • ❌ lodash-4.17.21.tgz (Vulnerable Library)

---

Vulnerability Details

Created automatically by the test suite

Publish Date: Jun 07, 2010 05:12 PM

URL: CVE-121740-819191

Threat Assessment

Exploit Maturity:N/A

EPSS:N/A

Score: 9.8

---

Suggested Fix

Type: Upgrade version

Origin:

Release Date:

Fix Resolution :