What’s Vulnerable › Products

jashkenas underscore vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your jashkenas underscore version is affected

Latest jashkenas underscore vulnerabilities

• CVE-2026-27601 — Underscore.js has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack (CVSS 5.9)
• CVE-2021-23358 — Arbitrary Code Injection (CVSS 7.2)