lodash
npmlatest 4.18.1 · 2026-04-01www.npmjs.com · all 117 versions
Security advisories5
- lodash: Regular Expression Denial of Service (ReDoS) in lodashfixed in 4.17.21
- lodash: Command Injection in lodashfixed in 4.17.21
- lodash: lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`fixed in 4.18.0
- lodash: lodash vulnerable to Code Injection via `_.template` imports key namesfixed in 4.18.0
- lodash: Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functionsfixed in 4.17.23
Versions that change something
- 4.17.212021-02fixes 2 advisories
- 4.17.232026-01fixes 1 advisory
- 4.18.02026-03fixes 2 advisories