lodash vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-4800Highlodash: lodash vulnerable to Code Injection via `_.template` imports key names CVE-2026-2950Mediumlodash: lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`CVE-2025-13465Mediumlodash: Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions CVE-2020-28500Mediumlodash: Regular Expression Denial of Service (ReDoS) in lodash CVE-2021-23337Highlodash: Command Injection in lodash CVE-2020-8203Highlodash: Prototype Pollution in lodash CVE-2019-1010266Mediumlodash: Regular Expression Denial of Service (ReDoS) in lodash CVE-2019-10744Criticallodash: Prototype Pollution in lodash CVE-2018-16487Highlodash: Prototype Pollution in lodash CVE-2018-3721Mediumlodash: Prototype Pollution in lodash

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo