L
Vendor security profile
lodash
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit2
Patch rate%40
Avg. CVSS6.8
12-month vulnerability rate
0
0
1
0
2
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
5toplam CVE
High2 (40%)
Medium3 (60%)
Patch and exploitation view
%40
Verified patch
%0
CISA KEV
%40
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
8.1
CVE-2026-4800lodash vulnerable to Code Injection via `_.template` imports key names
Patch status unknownEPSS %3
6.5
CVE-2026-2950lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`
Patch status unknownEPSS %0
6.9
CVE-2025-13465Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions
Patch status unknownEPSS %2
7.2
CVE-2021-23337Command Injection
Patch verified Public Exploits:1EPSS %21
5.3
CVE-2020-28500Regular Expression Denial of Service (ReDoS)
Patch verifiedEPSS %7