LO
Product
lodash-es
by lodash · last CVE Mar 31, 2026
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 2Low 0
Watch

Add lodash-es to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-4800
9.8
3%
Mar 31
lodash vulnerable to Code Injection via `_.template` imports key names
Affected: 4.0.0 before 4.18.1
Showing 1