`lodash`

Ecosystem:
npm

Package URL:
pkg:npm/lodash

Total PRs:
21,376 Dependabot PRs

Latest PR:
2 days ago

Unique Repositories:
17,522 repositories

Unique Repos (30 days):
31 repositories

Security Advisories

Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions

GHSA-xxjr-mmjv-4gpg CVE-2025-13465 MODERATE published 6 months ago • updated 2 days ago

### Impact Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the `_.unset` and `_.omit` functions. An attacker can pa...

View all 10 advisories

Recent PRs

RSS Feed

chore(deps): bump the npm_and_yarn group across 1 directory with 14 updates

big-main/personal-security-checklist #2

4.17.21 → 4.18.1 Minor PR

Open 2 days ago 5 comments

build(deps): bump lodash from 4.17.23 to 4.18.1

AutomatedEmpires/Open-Resource-Access-Network #68

4.17.23 → 4.18.1 Minor PR

Closed 6 days ago 2 comments

Bump the npm_and_yarn group across 1 directory with 30 updates

mrheyday/bitcoin-forge #46

4.17.19 → 4.18.1 Minor PR

Open 16 days ago 2 comments

Bump the npm_and_yarn group across 1 directory with 18 updates

rzazadebilal7/cloudflare-docs #3

4.17.21 → 4.18.1 Minor PR

Open 16 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates

rzazadebilal7/ccxt #2

4.17.21 → 4.18.1 Minor PR

Closed 16 days ago 1 comment

Bump lodash from 4.17.21 to 4.18.1

Giwi/ryze-tello-sdk #26

4.17.21 → 4.18.1 Minor PR

Closed 16 days ago 2 comments

Bump the npm_and_yarn group across 1 directory with 21 updates

steve57000/portfolio #6

4.17.21 → 4.18.1 Minor PR

Closed 16 days ago 1 comment

chore(deps): bump the npm-minor-patch group with 63 updates

ibrhyyme/Zkt-Timer #5

4.17.21 → 4.18.1 Minor PR

Open 17 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 12 updates

soapy-dns/retirement-calc #149

4.17.21 → 4.18.1 Minor PR

Open 17 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates

ai-shifu/ai-shifu #2014

4.17.21 → 4.18.1 Minor PR

Closed 17 days ago 1 comment

Bump lodash from 4.17.21 to 4.18.1

zhouhaoyiu/fast-diff #1

4.17.21 → 4.18.1 Minor PR

Closed 18 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 28 updates

rdreed21/morsebrowser_dev #35

4.17.21 → 4.18.1 Minor PR

Open 18 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 12 updates

maiconramos/robo-multipost #109

4.17.23 → 4.18.1 Minor PR

Closed 19 days ago 2 comments

chore(deps): bump lodash from 4.17.23 to 4.18.1

evdanil/vscode-NexTerminal #17

4.17.23 → 4.18.1 Minor PR

Closed 19 days ago 2 comments

Bump the npm_and_yarn group across 2 directories with 11 updates

GlacierEQ/plate #56

4.17.21 → 4.18.1 Minor PR

Open 19 days ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 9 updates

thec1rclehost123-cmd/thec1rcle #68

4.17.23 → 4.18.1 Minor PR

Open 20 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 13 updates

MeteoriteLabs/explorers.earth #71

4.17.23 → 4.18.1 Minor PR

Closed 24 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 6 updates

michaelwlu/portfolio #685

4.17.23 → 4.18.1 Minor PR

Closed 24 days ago 1 comment

chore(deps): bump the version-updates-group group with 18 updates

yosuke-291/dependabot-grouped-security-poc #7

4.17.9 → 4.18.1 Minor PR

Closed 24 days ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 19 updates

Dct555/aa-sdk #9

4.17.21 → 4.18.1 Minor PR

Open 24 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 20 updates

nssuwan186-dev/qwen-code #28

4.17.21 → 4.18.1 Minor PR

Closed 25 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 7 directories with 13 updates

lannathompson65-arch/toolkit #3

4.17.23 → 4.18.1 Minor PR

Open 26 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 26 updates

batuhan-basoglu/Hospital-Management-System #128

4.17.21 → 4.18.1 Minor PR

Closed 27 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 12 updates

maiconramos/robo-multipost #103

4.17.23 → 4.18.1 Minor PR

Closed 28 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 17 updates

meatflavourdev/docusaurus #5

4.17.21 → 4.18.1 Minor PR

Open 28 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 10 updates

selfagency/jsonforms #2

4.17.23 → 4.18.1 Minor PR

Open 29 days ago 3 comments

chore(deps): Bump the minor-and-patch group across 1 directory with 84 updates

iprite/perpos #53

4.17.21 → 4.18.1 Minor PR

Closed 29 days ago 2 comments

Bump lodash from 4.17.21 to 4.18.1

mfahadiqbalofcl/LX-DApp #3

4.17.21 → 4.18.1 Minor PR

Open 29 days ago 1 comment

build(deps): bump the production group across 1 directory with 84 updates

webrecorder/browsertrix #3414

4.17.21 → 4.18.1 Minor PR

Open 29 days ago 2 comments

chore(deps): Bump the minor-and-patch group across 1 directory with 64 updates

iprite/perpos #40

4.17.21 → 4.18.1 Minor PR

Closed 29 days ago 3 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 13 updates

maiconramos/robo-multipost #91

4.17.23 → 4.18.1 Minor PR

Closed 29 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 6 directories with 23 updates

Dev-moe-kyawaung/claude-code-templates #13

4.17.21 → 4.18.1 Minor PR

Open 29 days ago 3 comments

chore(deps): bump the npm_and_yarn group across 7 directories with 25 updates

Dev-moe-kyawaung/claude-code-templates #11

4.17.21 → 4.18.1 Minor PR

Closed 29 days ago 5 comments

Bump the npm_and_yarn group across 1 directory with 11 updates

OneFineStarstuff/livecodes #9

4.17.21 → 4.18.1 Minor PR

Open 30 days ago 10 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 19 updates

MeteoriteLabs/explorers.earth #55

4.17.23 → 4.18.1 Minor PR

Closed 30 days ago 2 comments

Bump the npm_and_yarn group across 1 directory with 24 updates

acidburn0zzz/babel #2

4.17.21 → 4.18.1 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates

mlorentedev/kubelab #700

4.17.21 → removed

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 9 directories with 7 updates

Surfndez/sqlopsstudio #42

4.17.10 → 4.18.1 Minor PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 5 directories with 8 updates

hashim2266/mcp.ken #1

4.17.23 → 4.18.1 Minor PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 1 directory with 13 updates

OneFineStarstuff/livecodes #5

4.17.21 → 4.18.1 Minor PR

Open about 1 month ago 7 comments

chore(deps): Bump the npm_and_yarn group across 3 directories with 11 updates

lisaross/n8n #2

4.17.21 → 4.18.1 Minor PR

Open about 1 month ago 1 comment

Bump the npm_and_yarn group across 1 directory with 18 updates

AvansHogeschoolBreda/openmrsmodule #5

3.10.1 → 4.18.1 Major PR

Closed about 1 month ago 2 comments

build(deps): bump the npm_and_yarn group across 3 directories with 26 updates

HarleyCoops/qwen-code #15

4.17.21 → 4.18.1 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 25 updates

sethdford/gemini-cli #11

4.17.21 → 4.18.1 Minor PR

Closed about 1 month ago 1 comment

Bump lodash and @nestjs/config in /src/api

Azure-Samples/app-service-javascript-sap-cloud-sdk-quickstart #184

4.17.21 → 4.18.1 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 15 updates

mlorentedev/kubelab #660

4.17.21 → removed

Open about 1 month ago 2 comments

Bump lodash and @graphql-codegen/plugin-helpers

dannymidnight/vscode-buildkite #50

removed Removal PR

Closed about 1 month ago 1 comment

chore(deps): bump the security group across 1 directory with 6 updates

thosor87/sosoapp #10

4.17.23 → 4.18.1 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 9 updates

NanoRocky/AstrBot-b #2

4.17.23 → 4.18.1 Minor PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 1 directory with 8 updates

Ziqian-Huang0607/AEGIS #1

4.17.21 → 4.18.1 Minor PR

Open about 1 month ago 1 comment

Package Details

Name:	`lodash`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/lodash`
JSON API:	View JSON

Security Advisories

10

Active advisories

CRITICAL 1

HIGH 4

MODERATE 5

View All npm Advisories

Package Information

Description:

Lodash modular utilities.

Repository:	https://github.com/lodash/lodash
Homepage:	https://lodash.com/
Latest Release:	`4.17.21` over 5 years ago
Dependent Repos:	1,936,033
Dependent Packages:	159,122
Downloads:	306,169,144
Ranking:	Top 0.0162% by dependent repos Top 0.0041% by downloads Top 0.0004% by dependent pkgs

PR Status

Open 10,593 (49.6%)

Merged 303 (1.4%)

Closed 10,311 (48.2%)

PR Types

Major 97 (0.5%)

Minor 4,662 (21.8%)

Patch 16,363 (76.5%)

Removal 62 (0.3%)

lodash

Security Advisories

Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions

Regular Expression Denial of Service (ReDoS) in lodash

Command Injection in lodash

lodash vulnerable to Code Injection via `_.template` imports key names

Prototype Pollution in lodash

Recent PRs

Package Details

Security Advisories

10

Package Information

PR Status

PR Types

`lodash`