`underscore`

Ecosystem:
npm

Package URL:
pkg:npm/underscore

Total PRs:
645 Dependabot PRs

Latest PR:
about 10 hours ago

Unique Repositories:
461 repositories

Unique Repos (30 days):
15 repositories

Security Advisories

Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack

GHSA-qpx9-hpmf-5gmw CVE-2026-27601 HIGH published 3 months ago • updated 6 days ago

### Impact In simple words, some programs that use `_.flatten` or `_.isEqual` could be made to crash. Someone who wants to do harm may be able to ...

1.13.6 → 1.13.8 Patch PR

Open 3 months ago 37 comments

Bump the npm_and_yarn group across 2 directories with 15 updates

AKJUS/ag-grid #421

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 18 updates

NotAwar/renovate #7

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 5 directories with 28 updates

LelandParker/dbgate #21

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 18 updates

thirdweb-dev/engine #936

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 16 directories with 6 updates

Arkimking86/web3-onboard #26

1.13.2 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 22 updates

ANT0071/atom #12

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 11 directories with 20 updates

marcelolavor/omnivore #27

1.13.4 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 13 directories with 20 updates

GlacierEQ/activepieces #32

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 4 comments

build(deps): bump the npm_and_yarn group across 1 directory with 21 updates

JounQin/renovate #13

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 7 updates

imrulo/consejo-seguro-asistente #2

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 8 directories with 20 updates

ssushant0011/activepieces #26

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 13 directories with 21 updates

GlacierEQ/activepieces #31

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 4 comments

Bump the npm_and_yarn group across 12 directories with 18 updates

balajirajput96/activepieces #31

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 5 updates

ParadiseSS13/Paradise #31732

1.12.1 → 1.13.6 Minor PR

Open 3 months ago 3 comments

Bump the npm_and_yarn group across 14 directories with 22 updates

GlacierEQ/activepieces #30

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 4 comments

build(deps): bump the npm_and_yarn group across 1 directory with 21 updates

JounQin/renovate #12

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 4 comments

build(deps): bump the npm_and_yarn group across 1 directory with 21 updates

omercnet/renovate #14

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 22 updates

Jguest7/renovate #8

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 11 directories with 9 updates

hallipr/azure-sdk-tools #12

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump underscore from 1.13.7 to 1.13.8

UKHomeOffice/visa-processing-times-tool-ah-fork #2

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump underscore from 1.13.7 to 1.13.8 in /aegis-vscode-remote/extension

carlosmsanchezm/sovran #11

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates

rdseb667-collab/TokenTradeX #277

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

Bump the npm_and_yarn group across 4 directories with 8 updates

luci-digital/guardian #58

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 10 updates

luci-digital/guardian #42

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 12 directories with 18 updates

balajirajput96/activepieces #29

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 14 updates

NYPL/nypl-library-card-app #590

1.13.1 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 22 directories with 20 updates

lkeff/sentry-javascript #101

1.12.1 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

Build(deps): bump the npm_and_yarn group across 69 directories with 7 updates

ruicout0/extensions #35

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 66 directories with 8 updates

arthrod/extensions #50

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 25 directories with 9 updates

Centaurioun/raycast-extensions #749

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 3 directories with 3 updates

equal-shares/equal-shares #32

1.12.1 → 1.13.6 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 6 updates

JiawenZhu/CareerVivid #10

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 4 updates

commercetools-demo/contentools #21

1.12.1 → 1.13.6 Minor PR

Closed 3 months ago 1 comment

Build(deps): bump the npm_and_yarn group across 77 directories with 11 updates

parterburn/extensions #139

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Upgrade: Bump the npm_and_yarn group across 1 directory with 28 updates

goodgollyholly/hint #26

1.13.1 → 1.13.8 Patch PR

Open 3 months ago 2 comments

Bump the npm_and_yarn group across 74 directories with 1 update

ksdmyanmar-lighter/azure-pipelines-tasks #84

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Upgrade: Bump the npm_and_yarn group across 1 directory with 28 updates

lkeff/hint #29

1.13.1 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Build(deps): bump the npm_and_yarn group across 78 directories with 11 updates

parterburn/extensions #138

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 6 directories with 6 updates

thebeastunleashed/NixOS-NixPkgs #24

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 11 updates

prakashgbid/caia #27

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 5 comments

Bump the npm_and_yarn group across 1 directory with 28 updates

sumonst21/kitsune #29

1.13.2 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 8 directories with 10 updates

luci-digital/guardian #39

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 50 directories with 8 updates

GloWE3/WebKit-4-Rainbowbeast #62

1.6.0 → 1.13.8 Minor PR

Open 3 months ago 3 comments

Bump the npm_and_yarn group across 12 directories with 18 updates

ANT0071/activepieces #26

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 19 updates

CasP0/renovate #9

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 13 directories with 18 updates

UniversalStandards/activepieces #27

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 8 updates

qenex-ai/renovate #45

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 12 directories with 18 updates

balajirajput96/activepieces #27

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

build(deps): bump the npm_and_yarn group across 9 directories with 6 updates

Kimduegab/microsoft-365-agents-toolkit #20

1.12.1 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

Package Details

Name:	`underscore`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/underscore`
JSON API:	View JSON

Security Advisories

2

Active advisories

CRITICAL 1

HIGH 1

View All npm Advisories

Package Information

Description:

JavaScript's functional programming helper library.

Repository:	https://github.com/jashkenas/underscore
Homepage:	https://underscorejs.org
Latest Release:	`1.13.7` almost 2 years ago
Dependent Repos:	738,210
Dependent Packages:	25,330
Downloads:	62,844,288
Ranking:	Top 0.042% by dependent repos Top 0.0307% by downloads Top 0.0044% by dependent pkgs

PR Status

Open 301 (46.7%)

Merged 17 (2.6%)

Closed 314 (48.8%)

PR Types

Minor 242 (37.6%)

Patch 371 (57.6%)

Removal 11 (1.7%)

underscore

Security Advisories

Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack

Arbitrary Code Execution in underscore

Recent PRs

Package Details

Security Advisories

2

Package Information

PR Status

PR Types

`underscore`