{"id":"CVE-2021-23358","aliases":["AZL-45222","CLSA-2026-1775003188","CLSA-2026-1775003190","CLSA-2026-1775003192","CLSA-2026-1792767425","DEBIAN-CVE-2021-23358","DLA-2613-1","DSA-4883-1","EUVD-2021-1042","GHSA-cf4h-3jhx-xvhq","MGASA-2021-0269","OESA-2021-1174","RHSA-2021:2865","RHSA-2022:6393","RHSA-2026:2769","ROOT-APP-NPM-CVE-2021-23358","UBUNTU-CVE-2021-23358","USN-4913-1","openSUSE-SU-2021:0601-1","openSUSE-SU-2024:11095-1"],"status":"published","title":"Arbitrary Code Injection","description":"The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.042,"percentile":0.91036,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-94"],"published":"2021-03-29T13:15:34Z","modified":"2026-11-05T05:36:30Z","exploits":[{"source":"pocgithub","id":"EkamSinghWalia/Detection-script-for-cve-2021-23358","title":"EkamSinghWalia/Detection-script-for-cve-2021-23358","date":"2023-02-25","url":"https://github.com/EkamSinghWalia/Detection-script-for-cve-2021-23358"},{"source":"pocgithub","id":"MehdiBoukhobza/SandBox_CVE-2021-23358","title":"MehdiBoukhobza/SandBox_CVE-2021-23358","date":"2024-07-04","url":"https://github.com/MehdiBoukhobza/SandBox_CVE-2021-23358"}],"fixes":[{"ecosystem":"npm","package":"underscore","fixed_in":["1.12.1"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:npm","package":"underscore","fixed_in":["1.6.0-tuxcare.1","1.4.4-tuxcare.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"underscore","fixed_in":["1.9.1~dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"underscore","fixed_in":["1.9.1~dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"underscore","fixed_in":["1.9.1~dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"underscore","fixed_in":["1.8.3~dfsg-1+deb9u1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"underscore","fixed_in":["1.9.1~dfsg-1+deb10u1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"puddletag","fixed_in":["2.0.2-0.git20210523.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"nodejs-underscore","fixed_in":["1.9.1-2.oe1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"underscore","fixed_in":["1.8.3-aikido.2","1.7.0-aikido.2","1.8.3-aikido.3","1.12.1-aikido.1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/underscore","fixed_in":["1.7.0-root.io.1","1.8.3-root.io.1","1.8.3-root.io.2","1.7.0-root.io.2","1.8.3-root.io.3","1.12.1-root.io.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"underscore","fixed_in":["1.4.4-2ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"underscore","fixed_in":["1.7.0~dfsg-1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"underscore","fixed_in":["1.8.3~dfsg-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"underscore","fixed_in":["1.9.1~dfsg-1ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"nodejs-underscore","fixed_in":["1.13.1-lp152.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"nodejs-underscore","fixed_in":["1.13.1-1.3"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.3.2"},{"fixed":"1.12.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"js-jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.5.0-4"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.0-tuxcare.0"},{"fixed":"1.6.0-tuxcare.1"}]}],"versions":["1.6.0"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.4.4-tuxcare.0"},{"fixed":"1.4.4-tuxcare.1"}]}],"versions":["1.4.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.0-tuxcare.0"},{"fixed":"1.7.0-tuxcare.1"}]}],"versions":["1.7.0"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.1-tuxcare.0"},{"fixed":"1.9.1-tuxcare.1"}]}],"versions":["1.9.1"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1~dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1~dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1~dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3~dfsg-1+deb9u1"}]}],"versions":["1.8.3~dfsg-1"]},{"source":"osv","ecosystem":"Debian:10","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1~dfsg-1+deb10u1"}]}],"versions":["1.9.1~dfsg-1"]},{"source":"osv","ecosystem":"npm","package":"underscore","ranges":[{"type":"SEMVER","events":[{"introduced":"1.3.2"},{"fixed":"1.12.1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"puddletag","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2-0.git20210523.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"nodejs-underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-2.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-ui-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-dbscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-health-check-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-restapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-cinderlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-imageio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-ovirt-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-ovirt-engine-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-vmconsole-proxy-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-tools-backup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-vmconsole-proxy-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-webadmin-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"python3-ovirt-engine-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"rhvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-web-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.1-1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-log-collector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.7-2.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-ui-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-exporter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-exporter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mon-client-nvmeof-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Root:npm","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-aikido.2"},{"fixed":"1.7.0-aikido.2"},{"fixed":"1.8.3-aikido.3"},{"fixed":"1.12.1-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-root.io.1"},{"fixed":"1.8.3-root.io.1"},{"fixed":"1.8.3-root.io.2"},{"fixed":"1.7.0-root.io.2"},{"fixed":"1.8.3-root.io.3"},{"fixed":"1.12.1-root.io.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-2ubuntu1+esm1"}]}],"versions":["1.4.4-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0~dfsg-1ubuntu1.1"}]}],"versions":["1.7.0~dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3~dfsg-1ubuntu0.1"}]}],"versions":["1.8.3~dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1~dfsg-1ubuntu0.20.04.1"}]}],"versions":["1.9.1~dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-2ubuntu1+esm1"}]}],"versions":["1.4.4-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0~dfsg-1ubuntu1.1"}]}],"versions":["1.7.0~dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3~dfsg-1ubuntu0.1"}]}],"versions":["1.8.3~dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1~dfsg-1ubuntu0.20.04.1"}]}],"versions":["1.9.1~dfsg-1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"nodejs-underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-lp152.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"nodejs-underscore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-1.3"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"jashkenas","product":"underscore"},{"vendor":"tenable","product":"tenable.sc"},{"vendor":"underscorejs","product":"underscore"}],"references":[{"url":"https://snyk.io/vuln/SNYK-JS-UNDERSCORE-1080984","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web","report"]},{"url":"https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1081503","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web"]},{"url":"https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1081504","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web"]},{"url":"https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBJASHKENAS-1081505","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web"]},{"url":"https://github.com/jashkenas/underscore/blob/master/modules/template.js%23L71","tags":["x_refsource_MISC","x_transferred","Broken Link","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/03/msg00038.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2021/dsa-4883","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/re69ee408b3983b43e9c4a82a9a17cbbf8681bb91a4b61b46f365aeaf%40%3Cissues.cordova.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r5df90c46f7000c4aab246e947f62361ecfb849c5a553dcdb0ef545e1%40%3Cissues.cordova.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/raae088abdfa4fbd84e1d19d7a7ffe52bf8e426b83e6599ea9a734dba%40%3Cissues.cordova.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rbc84926bacd377503a3f5c37b923c1931f9d343754488d94e6f08039%40%3Cissues.cordova.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r770f910653772317b117ab4472b0a32c266ee4abbafda28b8a6f9306%40%3Cissues.cordova.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.tenable.com/security/tns-2021-14","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKATXXETD2PF3OR36Q5PD2VSVAR6J5Z/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGEE7U4Z655A2MK5EW4UQQZ7B64XJWBV/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20240808-0003/","tags":["advisory"]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/14","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20241108-0002/","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23358","tags":["web","advisory"]},{"url":"https://github.com/jashkenas/underscore/pull/2917","tags":["web"]},{"url":"https://github.com/jashkenas/underscore/commit/4c73526d43838ad6ab43a6134728776632adeb66","tags":["web"]},{"url":"https://github.com/jashkenas/underscore/releases/tag/1.12.1","tags":["web"]},{"url":"https://www.npmjs.com/package/underscore","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r5df90c46f7000c4aab246e947f62361ecfb849c5a553dcdb0ef545e1@%3Cissues.cordova.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r770f910653772317b117ab4472b0a32c266ee4abbafda28b8a6f9306@%3Cissues.cordova.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/raae088abdfa4fbd84e1d19d7a7ffe52bf8e426b83e6599ea9a734dba@%3Cissues.cordova.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rbc84926bacd377503a3f5c37b923c1931f9d343754488d94e6f08039@%3Cissues.cordova.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/re69ee408b3983b43e9c4a82a9a17cbbf8681bb91a4b61b46f365aeaf@%3Cissues.cordova.apache.org%3E","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20241108-0002","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20240808-0003","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FGEE7U4Z655A2MK5EW4UQQZ7B64XJWBV","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EOKATXXETD2PF3OR36Q5PD2VSVAR6J5Z","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGEE7U4Z655A2MK5EW4UQQZ7B64XJWBV","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKATXXETD2PF3OR36Q5PD2VSVAR6J5Z","tags":["web"]},{"url":"https://github.com/advisories/GHSA-cf4h-3jhx-xvhq"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-23358","tags":["advisory"]},{"url":"https://github.com/jashkenas/underscore","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2021-0269.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29112","tags":["report"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1174","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2865","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1752996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1779983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1804774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1817346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877478","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1887434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1888354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1896359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944286","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1945459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1946876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1951579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956818","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967169","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970718","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2865.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7733","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7733","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7733","tags":["advisory"]},{"url":"https://snyk.io/vuln/SNYK-JS-UAPARSERJS-610226","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28469","tags":["advisory"]},{"url":"https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23343","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23343","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23343","tags":["advisory"]},{"url":"https://snyk.io/vuln/SNYK-JS-PATHPARSE-1077067","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23358","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23358","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6393","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1850004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034584","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2080005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092478","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107250","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108985","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2109923","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6393.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11022","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11022","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11022","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gxr4-xjj5-5px2","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11023","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11023","tags":["advisory"]},{"url":"https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-22096","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-22096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2806","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2806","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-31129","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-31129","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31129","tags":["advisory"]},{"url":"https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:2769","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2112230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2273911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2312579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2323735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2329426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2360974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2389907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392386","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392861","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2412237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2412474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418462","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2428617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2432069","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2769.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-34749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-34749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34749","tags":["advisory"]},{"url":"https://github.com/lepture/mistune/commit/a6d43215132fe4f3d93f8d7e90ba83b16a0838b2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-11831","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-11831","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11831","tags":["advisory"]},{"url":"https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e","tags":["article"]},{"url":"https://github.com/yahoo/serialize-javascript/pull/173","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-31884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-31884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-31884","tags":["advisory"]},{"url":"https://github.com/ceph/ceph/pull/66089","tags":["article"]},{"url":"https://github.com/ceph/ceph/pull/66140","tags":["article"]},{"url":"https://github.com/ceph/ceph/pull/66141","tags":["article"]},{"url":"https://github.com/ceph/ceph/pull/66142","tags":["article"]},{"url":"https://github.com/ceph/ceph/security/advisories/GHSA-xj9f-7g59-m4jx","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-47866","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47866","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47866","tags":["advisory"]},{"url":"https://github.com/ceph/ceph/security/advisories/GHSA-mgrm-g92q-f8h8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-51744","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-51744","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-51744","tags":["advisory"]},{"url":"https://github.com/golang-jwt/jwt/commit/7b1c1c00a171c6c79bbdb40e4ce7d197060c1c2c","tags":["article"]},{"url":"https://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-55565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2331063","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-55565","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-55565","tags":["advisory"]},{"url":"https://github.com/ai/nanoid/compare/3.3.7...3.3.8","tags":["article"]},{"url":"https://github.com/ai/nanoid/pull/510","tags":["article"]},{"url":"https://github.com/ai/nanoid/releases/tag/5.0.9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-26791","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-26791","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26791","tags":["advisory"]},{"url":"https://ensy.zip/posts/dompurify-323-bypass/","tags":["article"]},{"url":"https://github.com/cure53/DOMPurify/commit/d18ffcb554e0001748865da03ac75dd7829f0f02","tags":["article"]},{"url":"https://github.com/cure53/DOMPurify/releases/tag/3.2.4","tags":["article"]},{"url":"https://nsysean.github.io/posts/dompurify-323-bypass/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-47913","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-47913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47913","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hcg3-q754-cr77","tags":["advisory"]},{"url":"https://go.dev/cl/700295","tags":["article"]},{"url":"https://go.dev/issue/75178","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4116","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-52555","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-52555","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52555","tags":["advisory"]},{"url":"https://github.com/ceph/ceph/pull/60314","tags":["article"]},{"url":"https://github.com/ceph/ceph/security/advisories/GHSA-89hm-qq33-2fjm","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61729","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61729","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61729","tags":["advisory"]},{"url":"https://go.dev/cl/725920","tags":["article"]},{"url":"https://go.dev/issue/76445","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/8FJoBkPddm4","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4155","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-23358","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4913-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4913-2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OYT735UU6WLJPI53DIIUEZ4OG2ZZSATO/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1184800","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23358","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-23358","title":"Arbitrary Code Injection","description":"The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.","status":"published","published":"2021-03-29T13:15:34.77Z","modified":"2025-11-03T21:44:35.654Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C","level":"low","assessor":"cna"}],"updated_at":"2026-11-02T14:33:00.819444Z"}],"euvd":[{"id":"EUVD-2021-1042","description":"The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.","status":"published","published":"2021-03-29T13:15:34Z","modified":"2025-11-03T21:44:35Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C","level":"low"}],"updated_at":"2026-11-02T19:49:31.7352Z"}],"ghsa":[{"id":"GHSA-cf4h-3jhx-xvhq","title":"Arbitrary Code Execution in underscore","description":"The package `underscore` from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Execution via the template function, particularly when a variable property is passed as an argument as it is not sanitized.","status":"published","published":"2021-05-06T16:09:43Z","modified":"2025-11-04T16:34:00Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:39:05.278442Z"}],"nvd":[{"id":"CVE-2021-23358","description":"The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.","status":"published","published":"2021-03-29T14:15:18.047Z","modified":"2026-06-17T03:38:37.023Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:06:51.197859Z"}],"osv":[{"id":"AZL-45222","title":"CVE-2021-23358 affecting package js-jquery 3.5.0-4","description":"The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.","status":"published","published":"2021-03-29T14:15:18Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:20.321068Z"},{"id":"CVE-2021-23358","description":"The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.","status":"published","published":"2021-03-29T14:15:18.047Z","modified":"2026-10-24T10:30:25.618641014Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:18.367807Z"},{"id":"DEBIAN-CVE-2021-23358","description":"The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.","status":"published","published":"2021-03-29T14:15:18.047Z","modified":"2026-10-23T18:03:37.169647783Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"GHSA-cf4h-3jhx-xvhq","title":"Arbitrary Code Execution in underscore","description":"The package `underscore` from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Execution via the template function, particularly when a variable property is passed as an argument as it is not sanitized.","status":"published","published":"2021-05-06T16:09:43Z","modified":"2025-11-04T16:33:59Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:46:44.927642Z"},{"id":"OESA-2021-1174","title":"nodejs-underscore security update","description":"Underscore.js is a utility-belt library for JavaScript that provides support for the usual functional suspects (each, map, reduce, filter...) without extending any core JavaScript objects.\r\n\r\nSecurity Fix(es):\r\n\r\nThe package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.(CVE-2021-23358)","status":"published","published":"2021-05-06T11:04:24Z","modified":"2026-08-18T01:15:34.221148211Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:2865","title":"Red Hat Security Advisory: RHV Manager (ovirt-engine) security update [ovirt-4.4.7]","status":"published","published":"2024-09-18T04:19:09Z","modified":"2026-10-14T10:01:43Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2022:6393","title":"Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.2] bug fix and security update","status":"published","published":"2024-09-30T14:25:44Z","modified":"2026-10-13T10:03:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2026:2769","title":"Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security and bug fix updates","status":"published","published":"2026-04-04T10:05:14Z","modified":"2026-10-20T10:06:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"UBUNTU-CVE-2021-23358","description":"The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.","status":"published","published":"2021-03-29T14:15:00Z","modified":"2026-02-04T02:21:20.809836Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:54:26.779273Z"},{"id":"CLSA-2026-1775003188","title":"TuxCare security update for underscore (1 CVE)","description":"TuxCare rebuilt underscore to address 1 CVE. Fixed in 1.6.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:18Z","modified":"2026-10-15T19:13:04.505234555Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775003190","title":"TuxCare security update for underscore (1 CVE)","description":"TuxCare rebuilt underscore to address 1 CVE. Fixed in 1.4.4-tuxcare.1.","status":"published","published":"2026-08-04T14:52:18Z","modified":"2026-10-15T19:13:04.43768397Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775003192","title":"TuxCare security update for underscore (2 CVEs)","description":"TuxCare rebuilt underscore to address 2 CVEs. Fixed in 1.7.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:18Z","modified":"2026-10-15T09:47:48.797751233Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1792767425","title":"TuxCare security update for underscore (2 CVEs)","description":"TuxCare rebuilt underscore to address 2 CVEs. Fixed in 1.9.1-tuxcare.1.","status":"published","published":"2026-10-23T14:57:05Z","modified":"2026-10-23T19:15:08.949057554Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"DLA-2613-1","title":"underscore - security update","status":"published","published":"2021-03-31T00:00:00Z","modified":"2026-03-09T01:20:16.757549Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4883-1","title":"underscore - security update","status":"published","published":"2021-04-01T00:00:00Z","modified":"2026-03-09T02:10:42.348792Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0269","title":"Updated puddletag packages fix security vulnerability","description":"The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2\nand before 1.12.1 are vulnerable to Arbitrary Code Injectio via the\ntemplate function, particularly when a variable property is passed as\nan argument as it is not sanitized (CVE-2021-23358)\n","status":"published","published":"2021-06-18T19:24:28Z","modified":"2026-04-16T04:41:36.07872102Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0601-1","title":"Security update for nodejs-underscore","description":"This update for nodejs-underscore fixes the following issues:\n\nUpdate version to 1.13.1\n\n* Fix security issue (boo#1184800, CVE-2021-23358)\n* Fix bugs\n* Many new features\n","status":"published","published":"2021-04-23T10:46:45Z","modified":"2026-02-04T04:08:43.341366Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:11095-1","title":"nodejs-underscore-1.13.1-1.3 on GA media","description":"These are all security issues fixed in the nodejs-underscore-1.13.1-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:08:00.478822Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"ROOT-APP-NPM-CVE-2021-23358","title":"CVE-2021-23358 in underscore - Patched by Root","description":"Root has patched CVE-2021-23358 in the underscore package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-08-21T13:33:13Z","modified":"2026-08-21T15:00:07.903292906Z","updated_at":"2026-11-02T15:53:27.362922Z"},{"id":"USN-4913-1","title":"underscore vulnerability","description":"It was discovered that Underscore incorrectly handled certain inputs.\nAn attacker could possibly use this issue to inject arbitrary code.\n","status":"published","published":"2021-04-14T16:53:02Z","modified":"2026-06-29T13:48:52.646723328Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}