MEDIUM5.3npmRubyGems
GHSA-29mw-wpgm-hmr9· CVE-2020-28500Regular Expression Denial of Service (ReDoS) in lodash
Modified: 9/29/2025
package
npm/lodash
pkg:npm/lodash
HIGH7.2npmRubyGems
GHSA-35jh-r3h4-6jhm· CVE-2021-23337, CVE-2026-4800Command Injection in lodash
Modified: 9/10/2026
HIGHnpmRubyGems
GHSA-4xc9-xhrj-v574· CVE-2018-16487Prototype Pollution in lodash
Modified: 8/12/2025
MEDIUM6.5npm
GHSA-f23m-r3pf-42rh· CVE-2025-13465, CVE-2026-2950lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`
Modified: 9/10/2026
MEDIUM6.5npmRubyGems
GHSA-fvqr-27wr-82fm· CVE-2018-3721Prototype Pollution in lodash
Modified: 8/12/2025
CRITICAL9.1npmRubyGems
GHSA-jf85-cpcp-j695· CVE-2019-10744, SNYK-JS-LODASH-450202Prototype Pollution in lodash
Modified: 9/10/2026
HIGH7.4npmRubyGems
GHSA-p6mc-m468-83gw· CVE-2020-8203Prototype Pollution in lodash
Modified: 8/12/2025
HIGH8.1npm
GHSA-r5fr-rjxr-66jc· CVE-2021-23337, CVE-2026-4800lodash vulnerable to Code Injection via `_.template` imports key names
Modified: 9/10/2026
MEDIUM6.5npmRubyGems
GHSA-x5rq-j2xg-h7qm· CVE-2019-1010266, SNYK-JS-LODASH-73639Regular Expression Denial of Service (ReDoS) in lodash
Modified: 9/10/2026
MEDIUM6.5npm
GHSA-xxjr-mmjv-4gpg· CVE-2025-13465, CVE-2026-2950Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions
Modified: 9/10/2026