Vulnerabilities of lodash lodash-es
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-4800 | The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same… | 8.1 High | Mar 31, 2026 |
| CVE-2026-2950 | The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution | 6.5 Medium | Mar 31, 2026 |
| CVE-2025-13465 | The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution | 6.9 Medium | Jan 21, 2026 |