npm - OSV

MAL-2026-14182

npm/lodash-lib

Malicious code in lodash-lib (npm) 18 Aug

No fix available

MAL-2026-14048

npm/@lodash-js/lodash-js

Malicious code in @lodash-js/lodash-js (npm) 14 Aug

No fix available

MAL-2026-11434

npm/@404c3s4r/lodash

Malicious code in @404c3s4r/lodash (npm) 31 Jul

No fix available

MAL-2026-11327

npm/lodash-ex

Malicious code in lodash-ex (npm) 30 Jul

No fix available

MAL-2026-10856

npm/@gocortexio/npmgremlinbox-typosquat-lodash

Malicious code in @gocortexio/npmgremlinbox-typosquat-lodash (npm) 20 Jul

No fix available

MAL-2026-6739

npm/@lodash-en/lodash-en

Malicious code in @lodash-en/lodash-en (npm) 03 Jul

No fix available

GHSA-r5fr-rjxr-66jc

npm/lodash
npm/lodash-amd
npm/lodash-es
npm/lodash.template

lodash vulnerable to Code Injection via `_.template` imports key names 01 Apr

Fix available
Severity - 8.1 (High)

GHSA-f23m-r3pf-42rh

npm/lodash
npm/lodash-amd
npm/lodash-es
npm/lodash.unset

lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` 01 Apr

Fix available
Severity - 6.5 (Medium)

GHSA-xxjr-mmjv-4gpg

npm/lodash
npm/lodash-amd
npm/lodash-es
npm/lodash.unset

Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions 21 Jan

Fix available
Severity - 6.9 (Medium)

MAL-2025-192377

npm/gs-uitk-lodash

Malicious code in gs-uitk-lodash (npm) 08 Dec 2025

No fix available

MAL-2025-191574

npm/eslint-lodash

Malicious code in eslint-lodash (npm) 01 Dec 2025

No fix available

MAL-2025-48939

npm/types-lodash.es

Malicious code in types-lodash.es (npm) 28 Oct 2025

No fix available

MAL-2025-25503

npm/lodash-fast

Malicious code in lodash-fast (npm) 14 Aug 2025

No fix available

MAL-2025-25504

npm/lodash-g

Malicious code in lodash-g (npm) 14 Aug 2025

No fix available

MAL-2025-25505

npm/lodash-simple

Malicious code in lodash-simple (npm) 14 Aug 2025

No fix available

MAL-2025-25506

npm/lodash.js

Malicious code in lodash.js (npm) 14 Aug 2025

No fix available

Vulnerabilities