lodash.unset vulnerabilities (npm)

2 vulnerabilities.

• lodash.unset npm lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` CVE-2026-2950 Fix available 6.5 MediumMarch 31, 2026
• lodash.unset npm Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions CVE-2025-13465 Public exploitFix available 6.9 MediumJanuary 21, 2026