Package impact
npm / lodash-amd
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-4800 | critical | 9.8 | 9.8 | 1mo ago | Important: pcs security update | |||
| CVE-2025-13465 | medium | 5.3 | 5.3 | 16d ago | Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global pr… | |||
| CVE-2026-2950 | unknown | — | — | 2mo ago | Impact: Lodash versions 4.17.23 and earlier are vulnerable to prototype pollution in the _.unset and _.omit functions. The fix for (CVE-2025-13465: https://github.com/lodash/lodash/security/advisori… | |||
| CVE-2019-1010266 | unknown | — | — | 7y ago | lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long… | |||
| CVE-2019-10744 | unknown | — | — | 7y ago | Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor pay… |