`underscore`

Ecosystem:
npm

Package URL:
pkg:npm/underscore

Total PRs:
645 Dependabot PRs

Latest PR:
4 days ago

Unique Repositories:
461 repositories

Unique Repos (30 days):
15 repositories

Security Advisories

Arbitrary Code Execution in underscore

GHSA-cf4h-3jhx-xvhq CVE-2021-23358 CRITICAL published about 5 years ago • updated 1 day ago

The package `underscore` from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Execution via the templat...

Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack

GHSA-qpx9-hpmf-5gmw CVE-2026-27601 HIGH published 3 months ago • updated 9 days ago

### Impact In simple words, some programs that use `_.flatten` or `_.isEqual` could be made to crash. Someone who wants to do harm may be able to ...

Recent PRs

RSS Feed

Bump underscore from 1.13.3 to 1.13.8 in /python/stitch in the npm_and_yarn group across 1 directory

interpretml/interpret #654

1.13.3 → 1.13.8 Patch PR

Open 3 months ago 3 comments

Build(deps): bump the npm_and_yarn group across 67 directories with 9 updates

parterburn/extensions #133

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 11 directories with 7 updates

ANT0071/gatsby #23

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 7 directories with 17 updates

jadenblack/nocodb #30

1.13.2 → 1.13.8 Patch PR

Open 3 months ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 3 updates

JHOFER-Cloud/renovate #328

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 50 directories with 5 updates

GloWE3/WebKit-4-Rainbowbeast #59

1.6.0 → 1.13.8 Minor PR

Open 3 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 7 directories with 18 updates

seonghobae/nocodb #50

1.13.2 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 12 directories with 18 updates

balajirajput96/activepieces #25

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 13 updates

prakashgbid/caia #26

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 5 comments

Bump the npm_and_yarn group across 14 directories with 21 updates

GlacierEQ/activepieces #26

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 13 directories with 17 updates

sizzlebop/activepieces #24

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): Bump the npm_and_yarn group across 11 directories with 3 updates

haoyunZhou/cube #54

1.13.1 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 12 directories with 18 updates

ANT0071/activepieces #24

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 20 directories with 6 updates

Enterprizethirteen/Oryx #21

1.8.3 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 5 directories with 5 updates

thebeastunleashed/NixOS-NixPkgs #23

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 14 directories with 20 updates

GlacierEQ/activepieces #25

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 12 updates

open-webui/open-webui #22245

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 9 updates

RyzinRiley/MznKitsune #8

1.13.6 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 14 updates

prakashgbid/caia #25

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 5 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 3 updates

JiawenZhu/CareerVivid #9

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 75 directories with 5 updates

keito4/extensions #94

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 76 directories with 4 updates

keito4/extensions #93

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump underscore from 1.13.7 to 1.13.8

Talend/ui #5719

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 3 comments

Bump the npm_and_yarn group across 49 directories with 4 updates

GloWE3/WebKit-4-Rainbowbeast #58

1.6.0 → 1.13.8 Minor PR

Closed 3 months ago 4 comments

Bump underscore from 1.13.7 to 1.13.8

duckdb/duckdb-web #6553

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 14 directories with 19 updates

GlacierEQ/activepieces #24

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 13 directories with 16 updates

UniversalStandards/activepieces #24

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 2 comments

Bump underscore from 1.13.7 to 1.13.8

mitre/tir #174

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): bump underscore from 1.13.7 to 1.13.8

Enflame-Media/Magic-Agent #59

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 4 updates

DataScienceCOULIBALY/CID #5

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump underscore from 1.13.7 to 1.13.8

tranthanhbinh-ttbi/GI #45

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): bump underscore from 1.13.7 to 1.13.8 in /backend

Amineelhoumiri/TastyHub-RecipeSharingWbApp-DevOps- #62

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump underscore from 1.13.7 to 1.13.8 in /hakivo-api

tmoody1973/hakivo-v2 #39

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 2 comments

chore(deps): bump underscore from 1.13.7 to 1.13.8

stackconsult/workstation #445

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): bump underscore from 1.13.7 to 1.13.8

Loumeister/comparatief-beoordelen #21

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump underscore from 1.13.7 to 1.13.8

anongroot/mymove #136

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 4 comments

Bump underscore from 1.13.7 to 1.13.8

orbingol/aitos #23

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

build(deps): bump underscore from 1.13.7 to 1.13.8 in /generator/gapic-generator-typescript

googleapis/google-cloud-node-core #918

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

build(deps): bump underscore from 1.13.7 to 1.13.8

OffchainLabs/arbitrum-portal #191

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): bump underscore from 1.13.7 to 1.13.8 in /frontend

Rorschach3/credit-clarity #43

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump underscore from 1.13.7 to 1.13.8

WyvernPirate/Pioneer-Ventures-Society #45

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

build(deps): Bump underscore from 1.13.7 to 1.13.8

r3habb99/SearchforCommerceScript #1

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump underscore from 1.13.7 to 1.13.8 in /code/src/AttendeeSite

MRyan2378/skills-secure-repository-supply-chain #21

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump underscore from 1.13.7 to 1.13.8

xprez09/no.sikom.hyttavarm #9

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

build(deps): bump underscore from 1.13.7 to 1.13.8

fponticelli/tml #65

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

krishnprakash/gatsby #243

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 2 comments

build(deps): bump underscore from 1.13.7 to 1.13.8

Dynatrace/backstage-plugin #295

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

build(deps): bump underscore from 1.13.7 to 1.13.8 in /components/centraldashboard-angular/frontend

kubeflow/dashboard #232

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 6 comments

Bump underscore from 1.13.7 to 1.13.8 in /superset-frontend

Webgains/superset #137

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 10 updates

open-webui/open-webui #22203

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 3 comments

Package Details

Name:	`underscore`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/underscore`
JSON API:	View JSON

Security Advisories

2

Active advisories

CRITICAL 1

HIGH 1

View All npm Advisories

Package Information

Description:

JavaScript's functional programming helper library.

Repository:	https://github.com/jashkenas/underscore
Homepage:	https://underscorejs.org
Latest Release:	`1.13.7` almost 2 years ago
Dependent Repos:	738,210
Dependent Packages:	25,330
Downloads:	62,844,288
Ranking:	Top 0.042% by dependent repos Top 0.0307% by downloads Top 0.0044% by dependent pkgs

PR Status

Open 302 (46.8%)

Merged 17 (2.6%)

Closed 314 (48.7%)

PR Types

Minor 242 (37.5%)

Patch 372 (57.7%)

Removal 11 (1.7%)