Skip to content

Lodash Lodash.unset vulnerabilities

lodash, lodash lodash-amd, lodash-es +2 more +4 morelodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`CVE-2026-2950Fix available6.5 MediumMarch 31, 2026
lodash, lodash lodash-amd, lodash-es +119 more +121 morePrototype Pollution Vulnerability in Lodash _.unset and _.omit functionsCVE-2025-13465Public exploitFix available6.9 MediumJanuary 21, 2026