MEDIUM6.5npm
GHSA-f23m-r3pf-42rh· CVE-2025-13465, CVE-2026-2950lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`
Modified: 9/10/2026
package
npm/lodash-amd
pkg:npm/lodash-amd
CRITICAL9.1npmRubyGems
GHSA-jf85-cpcp-j695· CVE-2019-10744, SNYK-JS-LODASH-450202Prototype Pollution in lodash
Modified: 9/10/2026
HIGH8.1npm
GHSA-r5fr-rjxr-66jc· CVE-2021-23337, CVE-2026-4800lodash vulnerable to Code Injection via `_.template` imports key names
Modified: 9/10/2026
MEDIUM6.5npmRubyGems
GHSA-x5rq-j2xg-h7qm· CVE-2019-1010266, SNYK-JS-LODASH-73639Regular Expression Denial of Service (ReDoS) in lodash
Modified: 9/10/2026
MEDIUM6.5npm
GHSA-xxjr-mmjv-4gpg· CVE-2025-13465, CVE-2026-2950Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions
Modified: 9/10/2026