VYPR

Pydash

by Derrickgilland

CVEs (1)

  • CVE-2023-26145HigSep 28, 2023
    risk 0.41cvss 7.4epss 0.03

    This affects versions of the package pydash before 6.0.0. A number of pydash methods such as pydash.objects.invoke() and pydash.collections.invoke_map() accept dotted paths (Deep Path Strings) to target a nested Python object, relative to the original source object. These paths…