`underscore`

Ecosystem:
npm

Package URL:
pkg:npm/underscore

Total PRs:
644 Dependabot PRs

Latest PR:
9 days ago

Unique Repositories:
460 repositories

Unique Repos (30 days):
21 repositories

Security Advisories

Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack

GHSA-qpx9-hpmf-5gmw CVE-2026-27601 HIGH published 3 months ago • updated 5 days ago

### Impact In simple words, some programs that use `_.flatten` or `_.isEqual` could be made to crash. Someone who wants to do harm may be able to ...

1.13.6 → 1.13.8 Patch PR

Open 2 months ago 2 comments

Bump the npm_and_yarn group across 3 directories with 17 updates

AKJUS/ag-grid #426

1.13.7 → 1.13.8 Patch PR

Closed 2 months ago 2 comments

Bump the npm_and_yarn group across 3 directories with 19 updates

CxsLucyfer/theme-tools #43

1.13.6 → 1.13.8 Patch PR

Closed 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 10 directories with 15 updates

nathanbedford/redwood #15

1.13.6 → 1.13.8 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 8 directories with 21 updates

UniversalStandards/activepieces #44

1.13.7 → 1.13.8 Patch PR

Open 2 months ago 2 comments

Bump the npm_and_yarn group across 8 directories with 21 updates

AaronJessen/activepieces #43

1.13.7 → 1.13.8 Patch PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 17 updates

NYPL/nypl-library-card-app #639

1.13.1 → 1.13.8 Patch PR

Open 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 26 updates

CaligraLtd/Ulauncher #2

1.9.1 → 1.13.8 Minor PR

Closed 2 months ago 1 comment

Bump underscore from 1.13.1 to 1.13.8 in /packages/generator-botkit

wearekadence/botkit #4

1.13.1 → 1.13.8 Patch PR

Open 2 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 14 updates

IsaacBell/ember-string-helpers #1

1.8.3 → 1.13.8 Minor PR

Open 2 months ago 3 comments

Bump the npm_and_yarn group across 4 directories with 9 updates

jgeofil/nocodb #34

1.13.2 → 1.13.8 Patch PR

Open 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 8 directories with 16 updates

prakashgbid/caia #35

1.13.7 → 1.13.8 Patch PR

Open 2 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 22 directories with 19 updates

lkeff/sentry-javascript #126

1.12.1 → 1.13.8 Minor PR

Closed 2 months ago 1 comment

Bump underscore from 1.7.0 to 1.13.8

Uninett/nav #3941

1.7.0 → 1.13.8 Minor PR

Open 2 months ago 6 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 20 updates

NotAwar/renovate #13

1.13.7 → 1.13.8 Patch PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 4 directories with 7 updates

junkojv/devops-portfolio #25

1.13.2 → 1.13.8 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 8 directories with 15 updates

prakashgbid/caia #34

1.13.7 → 1.13.8 Patch PR

Open 2 months ago 4 comments

build(deps): bump the npm_and_yarn group across 3 directories with 24 updates

JounQin/renovate #20

1.13.7 → 1.13.8 Patch PR

Open 2 months ago 2 comments

Bump the npm_and_yarn group across 4 directories with 10 updates

jgeofil/nocodb #32

1.13.2 → 1.13.8 Patch PR

Open 2 months ago 1 comment

Bump the npm_and_yarn group across 10 directories with 9 updates

Ekittl01/bitcore #44

1.9.1 → 1.9.2 Patch PR

Open 2 months ago 1 comment

Bump the npm_and_yarn group across 12 directories with 20 updates

GlacierEQ/activepieces #44

1.13.7 → 1.13.8 Patch PR

Open 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 12 directories with 20 updates

UniversalStandards/activepieces #40

1.13.7 → 1.13.8 Patch PR

Open 2 months ago 2 comments

Bump the npm_and_yarn group across 38 directories with 5 updates

Takuya-Miyazaki/azure-pipelines-tasks #131

1.13.7 → 1.13.8 Patch PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 38 updates

nikolas-eng/defi-providers #1

1.13.6 → 1.13.8 Patch PR

Open 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 17 directories with 9 updates

Arkimking86/web3-onboard #36

1.13.2 → 1.13.8 Patch PR

Open 2 months ago 1 comment

build(deps): Bump the npm_and_yarn group across 6 directories with 19 updates

EmpCloud/emp-monitor #41

1.13.7 → 1.13.8 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 18 updates

thirdweb-dev/engine #938

1.13.7 → 1.13.8 Patch PR

Open 2 months ago 3 comments

build(deps): bump the npm_and_yarn group across 39 directories with 10 updates

mitchelfalcon/firebase-js-sdk #26

1.13.7 → 1.13.8 Patch PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 12 directories with 20 updates

GlacierEQ/activepieces #41

1.13.7 → 1.13.8 Patch PR

Open 2 months ago 3 comments

chore(deps): Bump the npm_and_yarn group across 1 directory with 9 updates

whizbang-lib/whizbang-vscode #37

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 17 updates

AKJUS/ag-grid #424

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 3 comments

Bump underscore from 1.13.7 to 1.13.8 in /scripts in the npm_and_yarn group across 1 directory

GolDRoger21/GoldGYS #378

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 7 updates

saagpatel/IncidentReview #1

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 6 updates

alexandercarlis2-dotcom/AFFiNE #1

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

npm: bump the npm_and_yarn group across 1 directory with 6 updates

Erdemhasates35/ArelimSonRepo #2

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

npm: bump underscore from 1.13.7 to 1.13.8

Erdemhasates35/ArelimSonRepo #1

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 10 updates

BrightandSunny/NeurixPlay #9

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 8 directories with 14 updates

prakashgbid/caia #32

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 3 comments

chore(deps): update underscore requirement from ^1.13.7 to ^1.13.8 in /superset-frontend/plugins/legacy-preset-chart-deckgl

light050687/superset #35

^1.13.7 → ^1.13.8 Patch PR

Open 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 3 directories with 23 updates

JounQin/renovate #19

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 3 comments

Bump underscore from 1.13.7 to 1.13.8

bobbravo2/odh-dashboard #10

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 8 directories with 18 updates

ccwu0918/pollinations #35

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 13 directories with 7 updates

ssushant0011/helicone #44

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

deps(deps): bump the frontend-security group across 1 directory with 3 updates

BjornMelin/tripsage-ai #703

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

build(deps): bump the npm_and_yarn group across 17 directories with 10 updates

ajc161/nixpkgs #22

1.13.1 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 29 updates

sumonst21/kitsune #33

1.13.2 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 6 directories with 11 updates

seonghobae/nocodb #61

1.13.2 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 15 updates

open-webui/open-webui #22872

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 6 directories with 12 updates

jadenblack/nocodb #38

1.13.2 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 9 directories with 18 updates

GlacierEQ/activepieces #38

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 3 comments

Package Details

Name:	`underscore`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/underscore`
JSON API:	View JSON

Security Advisories

2

Active advisories

CRITICAL 1

HIGH 1

View All npm Advisories

Package Information

Description:

JavaScript's functional programming helper library.

Repository:	https://github.com/jashkenas/underscore
Homepage:	https://underscorejs.org
Latest Release:	`1.13.7` almost 2 years ago
Dependent Repos:	738,210
Dependent Packages:	25,330
Downloads:	62,844,288
Ranking:	Top 0.042% by dependent repos Top 0.0307% by downloads Top 0.0044% by dependent pkgs

PR Status

Open 301 (46.7%)

Merged 17 (2.6%)

Closed 314 (48.8%)

PR Types

Minor 242 (37.6%)

Patch 371 (57.6%)

Removal 11 (1.7%)

underscore

Security Advisories

Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack

Arbitrary Code Execution in underscore

Recent PRs

Package Details

Security Advisories

2

Package Information

PR Status

PR Types

`underscore`