Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-qpx9-hpmf-5gmw
  • npm/underscore
 Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack 03 Mar
  • Fix available
  • Severity - 8.2 (High)
GHSA-gpvc-mx6g-cchv
  • npm/underscore-keypath
 underscore-keypath vulnerable to Prototype Pollution 01 Aug 2023
  • No fix available
  • Severity - 7.5 (High)
GHSA-cf4h-3jhx-xvhq
  • npm/underscore
 Arbitrary Code Execution in underscore 06 May 2021
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-v2p6-4mp7-3r9v
  • npm/underscore.string
 Regular Expression Denial of Service in underscore.string 14 Jun 2019
  • Fix available