Package impact

npm npm / lodash

0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2026-4800 critical 9.8 9.8 1mo ago Important: pcs security update
CVE-2025-13465 medium 5.3 5.3 16d ago Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global pr…