CRITICAL9.8npm
GHSA-cf4h-3jhx-xvhq· CVE-2021-23358Arbitrary Code Execution in underscore
Modified: 11/4/2025
package
npm/underscore
pkg:npm/underscore
MEDIUM5.9npm
GHSA-qpx9-hpmf-5gmw· CVE-2026-27601Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack
Modified: 9/10/2026