`underscore`

Ecosystem:
npm

Package URL:
pkg:npm/underscore

Total PRs:
645 Dependabot PRs

Latest PR:
about 5 hours ago

Unique Repositories:
461 repositories

Unique Repos (30 days):
15 repositories

Security Advisories

Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack

GHSA-qpx9-hpmf-5gmw CVE-2026-27601 HIGH published 3 months ago • updated 6 days ago

### Impact In simple words, some programs that use `_.flatten` or `_.isEqual` could be made to crash. Someone who wants to do harm may be able to ...

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 3 comments

build(deps): bump the npm_and_yarn group across 3 directories with 23 updates

JounQin/renovate #18

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 12 updates

YoutacRandS-VA/mautic #14

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

Bump the npm_and_yarn group across 10 directories with 11 updates

preechapon250/next.js #27

1.13.6 → 1.13.8 Patch PR

Open 3 months ago 3 comments

Bump the npm_and_yarn group across 10 directories with 10 updates

preechapon250/next.js #26

1.13.6 → 1.13.8 Patch PR

Open 3 months ago 3 comments

Bump the npm_and_yarn group across 9 directories with 12 updates

preechapon250/next.js #25

1.13.6 → 1.13.8 Patch PR

Open 3 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 8 directories with 13 updates

prakashgbid/caia #31

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 6 directories with 11 updates

jadenblack/nocodb #37

1.13.2 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

Bump the npm_and_yarn group across 10 directories with 10 updates

LoveDoLove-Forked-Projects/next.js #20

1.13.6 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 17 directories with 7 updates

Arkimking86/web3-onboard #30

1.13.2 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 5 directories with 24 updates

c6ai/tldraw #4

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 6 directories with 12 updates

tldraw/tldraw #8268

1.13.6 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 6 directories with 12 updates

tldraw/tldraw #8262

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 4 comments

Bump the npm_and_yarn group across 6 directories with 10 updates

Dargon789/sequence.js #386

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 5 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 19 updates

NotAwar/renovate #10

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 9 directories with 18 updates

AaronJessen/activepieces #30

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 12 updates

Sin-Estres-dev/kitsune #14

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): Bump the npm_and_yarn group across 8 directories with 13 updates

preechapon250/next.js #24

1.13.6 → 1.13.8 Patch PR

Open 3 months ago 4 comments

chore(deps): Bump the npm_and_yarn group across 8 directories with 13 updates

Pcnaid-Dev/Next.js-Coder #862

1.13.6 → 1.13.8 Patch PR

Open 3 months ago 44 comments

Bump the npm_and_yarn group across 2 directories with 19 updates

AdrianNadeau/priority-pilot #12

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 15 updates

NYPL/nypl-library-card-app #610

1.13.1 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump underscore from 1.13.7 to 1.13.8 in /frontend

Sende45/betna-immo #11

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 14 updates

AKJUS/atom #41

1.13.6 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 3 updates

not-a-ethan/React-practice #8

1.12.1 → 1.13.6 Minor PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 3 updates

K1ngHandy/Profile-View #23

1.12.1 → 1.13.6 Minor PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 27 updates

Bonniemarie216/streamlit #82

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 3 comments

Bump the npm_and_yarn group across 7 directories with 24 updates

mitchelfalcon/atom-1 #13

1.9.1 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 9 directories with 4 updates

sizzlebop/helicone #36

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 10 directories with 4 updates

ssushant0011/helicone #37

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 16 directories with 6 updates

Arkimking86/web3-onboard #28

1.13.2 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 8 directories with 12 updates

prakashgbid/caia #30

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 3 comments

Bump the npm_and_yarn group across 3 directories with 25 updates

rionnaldi/cyfrin-smartcontract-auditing #24

1.9.1 → removed

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 5 directories with 28 updates

LelandParker/dbgate #23

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 6 directories with 3 updates

balajirajput96/microsoft-365-agents-toolkit #39

1.12.1 → 1.13.8 Minor PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 30 updates

ludoplex/tabby #13

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 23 updates

ANT0071/atom #13

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 12 directories with 24 updates

ssushant0011/omnivore #34

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): Bump the npm_and_yarn group across 15 directories with 17 updates

pboling/sentry-javascript #19

1.12.1 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 13 updates

LoveDoLove-Forked-Projects/next.js #11

1.13.6 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): Bump the npm_and_yarn group across 7 directories with 12 updates

Pcnaid-Dev/Next.js-Coder #850

1.13.6 → 1.13.8 Patch PR

Open 3 months ago 5 comments

chore(deps): Bump the npm_and_yarn group across 2 directories with 3 updates

storm-software/storm-ops #1126

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 3 comments

Bump the npm_and_yarn group across 12 directories with 19 updates

GlacierEQ/activepieces #33

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 13 updates

open-webui/open-webui #22656

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 3 comments

build(deps): bump the npm_and_yarn group across 11 directories with 14 updates

twcctz200/sentry-javascript #61

1.12.1 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 29 updates

sumonst21/kitsune #32

1.13.2 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): Bump the npm_and_yarn group across 8 directories with 15 updates

preechapon250/next.js #21

1.13.6 → 1.13.8 Patch PR

Open 3 months ago 5 comments

chore(deps): Bump the npm_and_yarn group across 8 directories with 15 updates

Pcnaid-Dev/Next.js-Coder #847

1.13.6 → 1.13.8 Patch PR

Open 3 months ago 34 comments

Bump the npm_and_yarn group across 1 directory with 36 updates

webmaeistro/gatsby-starter-tyra-c8442 #1

1.13.1 → 1.13.8 Patch PR

Open 3 months ago 4 comments

Bump the npm_and_yarn group across 8 directories with 15 updates

Pcnaid-Dev/Next.js-Coder #845

1.13.6 → 1.13.8 Patch PR

Open 3 months ago 35 comments

Bump the npm_and_yarn group across 1 directory with 8 updates

benbalter/word-to-markdown-js #136

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 4 comments

Package Details

Name:	`underscore`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/underscore`
JSON API:	View JSON

Security Advisories

2

Active advisories

CRITICAL 1

HIGH 1

View All npm Advisories

Package Information

Description:

JavaScript's functional programming helper library.

Repository:	https://github.com/jashkenas/underscore
Homepage:	https://underscorejs.org
Latest Release:	`1.13.7` almost 2 years ago
Dependent Repos:	738,210
Dependent Packages:	25,330
Downloads:	62,844,288
Ranking:	Top 0.042% by dependent repos Top 0.0307% by downloads Top 0.0044% by dependent pkgs

PR Status

Open 301 (46.7%)

Merged 17 (2.6%)

Closed 314 (48.8%)

PR Types

Minor 242 (37.6%)

Patch 371 (57.6%)

Removal 11 (1.7%)

underscore

Security Advisories

Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack

Arbitrary Code Execution in underscore

Recent PRs

Package Details

Security Advisories

2

Package Information

PR Status

PR Types

`underscore`