lodash
- Products in analyzed data
- 5
- Catalog vulnerabilities
- 10
Severity across 4 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 4 analyzed records
A short verification protects source data and prevents automated AI requests.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-4800lodash vulnerable to Code Injection via `_.template` imports key names | Exploitation statusNot known exploited | FixYes | Affected productlodash | Published03/31/2026 | SeverityHigh |
CVE-2026-2950lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` | Exploitation statusNot known exploited | FixYes | Affected productlodash | Published03/31/2026 | SeverityMedium |
CVE-2025-13465Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions | Exploitation statusNot known exploited | FixYes | Affected productlodash | Published01/21/2026 | SeverityMedium |
CVE-2021-23337Command Injection | Exploitation statusNot confirmed | FixNot confirmed | Affected productlodash | Published02/15/2021 | SeverityHigh |
CVE-2020-28500Regular Expression Denial of Service (ReDoS) | Exploitation statusNot confirmed | FixNot confirmed | Affected productlodash | Published02/15/2021 | SeverityMedium |
CVE-2020-8203CVE-2020-8203 | Exploitation statusNot confirmed | FixNot confirmed | Affected productlodash | Published07/15/2020 | SeverityUnknown |
CVE-2019-10744CVE-2019-10744 | Exploitation statusNot confirmed | FixNot confirmed | Affected productlodash | Published07/25/2019 | SeverityUnknown |
CVE-2019-1010266CVE-2019-1010266 | Exploitation statusNot confirmed | FixNot confirmed | Affected productlodash | Published07/17/2019 | SeverityUnknown |
CVE-2018-16487CVE-2018-16487 | Exploitation statusNot confirmed | FixNot confirmed | Affected productlodash | Published02/01/2019 | SeverityUnknown |
CVE-2018-3721CVE-2018-3721 | Exploitation statusNot confirmed | FixNot confirmed | Affected productlodash node module | Published06/07/2018 | SeverityUnknown |