pkg:npm/lodash

All known vulnerabilities

• CRITICAL9.1CVE-2019-10744Prototype Pollution in lodash
  from 0, < 4.17.12
• HIGH8.1CVE-2026-4800lodash vulnerable to Code Injection via `_.template` imports key names
  >= 4.0.0, < 4.18.0
• HIGH7.4CVE-2020-8203Prototype Pollution in lodash
  >= 3.7.0, < 4.17.19
• HIGH7.2Command Injection in lodash
  from 0, < 4.17.21
• MEDIUM6.5lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`
  from 0, < 4.18.0
• MEDIUM6.5Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions
  >= 4.0.0, < 4.17.23
• MEDIUM6.5Regular Expression Denial of Service (ReDoS) in lodash
  >= 4.7.0, < 4.17.11
• MEDIUM6.5Prototype Pollution in lodash
  from 0, < 4.17.5
• MEDIUM5.6Prototype Pollution in lodash
  from 0, < 4.17.11
• MEDIUM5.3Regular Expression Denial of Service (ReDoS) in lodash
  >= 4.0.0, < 4.17.21