CRITICAL9.8npm
GHSA-cf4h-3jhx-xvhq· CVE-2021-23358Arbitrary Code Execution in underscore
Modified: 11/4/2025
package
pkg:npm/underscore
Arbitrary Code Execution in underscore
Modified: 11/4/2025
Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack
Modified: 9/10/2026