Lodash vulnerabilities

Products

• Lodash 10
• Lodash-amd 3
• Lodash-es 3
• Lodash.omit 2
• Lodash.unset 2

Newest

• lodash, lodash lodash-amd, lodash-es +105 more +107 more lodash vulnerable to Code Injection via `_.template` imports key names CVE-2026-4800 Public exploitFix available 8.1 HighMarch 31, 2026
• lodash, lodash lodash-amd, lodash-es +2 more +4 more lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` CVE-2026-2950 Fix available 6.5 MediumMarch 31, 2026
• lodash, lodash lodash-amd, lodash-es +119 more +121 more Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions CVE-2025-13465 Public exploitFix available 6.9 MediumJanuary 21, 2026
• lodash, netapp active iq unified manager, cloud manager +20 more +22 more Command Injection CVE-2021-23337 Public exploitFix available EPSS 21.3% 7.2 HighFebruary 15, 2021
• lodash, oracle banking corporate lending process management, banking credit facilities process management +16 more +18 more Regular Expression Denial of Service (ReDoS) CVE-2020-28500 Fix available 5.3 MediumFebruary 15, 2021
• lodash, oracle banking corporate lending process management, banking credit facilities process management +15 more +17 more Prototype Pollution in lodash CVE-2020-8203 Public exploitFix available 7.4 HighJuly 15, 2020
• lodash Regular Expression Denial of Service (ReDoS) in lodash CVE-2019-1010266 Fix available 6.5 MediumJuly 17, 2019
• lodash, f5 big-ip access policy manager, big-ip advanced firewall manager +18 more +20 more Prototype Pollution in lodash CVE-2019-10744 Public exploitFix available 9.1 CriticalJuly 10, 2019
• hackerone lodash Prototype Pollution in lodash CVE-2018-16487 Fix available 5.6 MediumFebruary 1, 2019
• hackerone lodash node module, lodash, netapp active iq unified manager +1 more +3 more Prototype Pollution in lodash CVE-2018-3721 Fix available 6.5 MediumJune 7, 2018