Underscorejs Underscore vulnerabilities

• jashkenas underscore Underscore.js has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack CVE-2026-27601 Fix available 8.2 HighMarch 3, 2026
• jashkenas underscore, debian linux, fedoraproject fedora +1 more +3 more Arbitrary Code Injection CVE-2021-23358 Public exploitFix available 3.3 LowMarch 29, 2021