Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-6739
  • npm/@lodash-en/lodash-en
 Malicious code in @lodash-en/lodash-en (npm) 6 days ago
  • No fix available
GHSA-r5fr-rjxr-66jc
  • npm/lodash
  • npm/lodash-amd
  • npm/lodash-es
  • npm/lodash.template
 lodash vulnerable to Code Injection via `_.template` imports key names 01 Apr
  • Fix available
  • Severity - 8.1 (High)
GHSA-f23m-r3pf-42rh
  • npm/lodash
  • npm/lodash-amd
  • npm/lodash-es
  • npm/lodash.unset
 lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` 01 Apr
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-xxjr-mmjv-4gpg
  • npm/lodash
  • npm/lodash-amd
  • npm/lodash-es
  • npm/lodash.unset
 Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions 21 Jan
  • Fix available
  • Severity - 6.9 (Medium)
MAL-2025-192377
  • npm/gs-uitk-lodash
 Malicious code in gs-uitk-lodash (npm) 08 Dec 2025
  • No fix available
MAL-2025-191574
  • npm/eslint-lodash
 Malicious code in eslint-lodash (npm) 01 Dec 2025
  • No fix available
MAL-2025-48939
  • npm/types-lodash.es
 Malicious code in types-lodash.es (npm) 28 Oct 2025
  • No fix available
MAL-2025-25503
  • npm/lodash-fast
 Malicious code in lodash-fast (npm) 14 Aug 2025
  • No fix available
MAL-2025-25504
  • npm/lodash-g
 Malicious code in lodash-g (npm) 14 Aug 2025
  • No fix available
MAL-2025-25505
  • npm/lodash-simple
 Malicious code in lodash-simple (npm) 14 Aug 2025
  • No fix available
MAL-2025-25506
  • npm/lodash.js
 Malicious code in lodash.js (npm) 14 Aug 2025
  • No fix available
MAL-2025-3978
  • npm/@hm6816/lodash-isequal
 Malicious code in @hm6816/lodash-isequal (npm) 19 May 2025
  • No fix available
MAL-2025-318
  • npm/webpack-extensive-lodash-replacement-plugin
 Malicious code in webpack-extensive-lodash-replacement-plugin (npm) 21 Jan 2025
  • No fix available
MAL-2024-8059
  • npm/lodash-scripts
 Malicious code in lodash-scripts (npm) 28 Aug 2024
  • No fix available
MAL-2024-2634
  • npm/lodash.findlastm
 Malicious code in lodash.findlastm (npm) 25 Jun 2024
  • No fix available
MAL-2024-1201
  • npm/lodash-electron
 Malicious code in lodash-electron (npm) 04 Apr 2024
  • No fix available
Load more...(2 pages left)