lodash vulnerabilities (npm)

10 vulnerabilities.

• lodash npm lodash vulnerable to Code Injection via `_.template` imports key names CVE-2026-4800 Public exploitFix available 8.1 HighMarch 31, 2026
• lodash npm lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` CVE-2026-2950 Fix available 6.5 MediumMarch 31, 2026
• lodash npm Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions CVE-2025-13465 Public exploitFix available 6.9 MediumJanuary 21, 2026
• lodash npm Command Injection CVE-2021-23337 Public exploitFix available EPSS 21.3% 7.2 HighFebruary 15, 2021
• lodash npm Regular Expression Denial of Service (ReDoS) CVE-2020-28500 Fix available 5.3 MediumFebruary 15, 2021
• lodash npm Prototype Pollution in lodash CVE-2020-8203 Public exploitFix available 7.4 HighJuly 15, 2020
• lodash npm Regular Expression Denial of Service (ReDoS) in lodash CVE-2019-1010266 Fix available 6.5 MediumJuly 17, 2019
• lodash npm Prototype Pollution in lodash CVE-2019-10744 Public exploitFix available 9.1 CriticalJuly 10, 2019
• lodash npm Prototype Pollution in lodash CVE-2018-16487 Fix available 5.6 MediumFebruary 1, 2019
• lodash npm Prototype Pollution in lodash CVE-2018-3721 Fix available 6.5 MediumJune 7, 2018