What’s Vulnerable › Products

lodash-es vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your lodash-es version is affected

Latest lodash-es vulnerabilities

• CVE-2026-4800 — lodash vulnerable to Code Injection via `_.template` imports key names (CVSS 9.8)
• CVE-2026-2950 — lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` (CVSS 5.3)