lodash-es vulnerabilities (npm)

8 vulnerabilities.

• lodash-es npm lodash vulnerable to Code Injection via `_.template` imports key names CVE-2026-4800 Public exploitFix available 8.1 HighMarch 31, 2026
• lodash-es npm lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` CVE-2026-2950 Fix available 6.5 MediumMarch 31, 2026
• lodash-es npm Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions CVE-2025-13465 Public exploitFix available 6.9 MediumJanuary 21, 2026
• lodash-es npm Command Injection CVE-2021-23337 Public exploitFix available EPSS 21.3% 7.2 HighFebruary 15, 2021
• lodash-es npm Regular Expression Denial of Service (ReDoS) CVE-2020-28500 Fix available 5.3 MediumFebruary 15, 2021
• lodash-es npm Prototype Pollution in lodash CVE-2020-8203 Public exploitFix available 7.4 HighJuly 15, 2020
• lodash-es npm Regular Expression Denial of Service (ReDoS) in lodash CVE-2019-1010266 Fix available 6.5 MediumJuly 17, 2019
• lodash-es npm Prototype Pollution in lodash CVE-2019-10744 Public exploitFix available 9.1 CriticalJuly 10, 2019