underscore vulnerabilities (Debian)

2 vulnerabilities.

• underscore Debian Underscore.js has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack CVE-2026-27601 Fix available 8.2 HighMarch 3, 2026
• underscore Debian Arbitrary Code Injection CVE-2021-23358 Public exploitFix available 3.3 LowMarch 29, 2021