`underscore`

Ecosystem:
npm

Package URL:
pkg:npm/underscore

Total PRs:
645 Dependabot PRs

Latest PR:
5 days ago

Unique Repositories:
461 repositories

Unique Repos (30 days):
15 repositories

Security Advisories

Arbitrary Code Execution in underscore

GHSA-cf4h-3jhx-xvhq CVE-2021-23358 CRITICAL published about 5 years ago • updated 2 days ago

The package `underscore` from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Execution via the templat...

Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack

GHSA-qpx9-hpmf-5gmw CVE-2026-27601 HIGH published 3 months ago • updated 10 days ago

### Impact In simple words, some programs that use `_.flatten` or `_.isEqual` could be made to crash. Someone who wants to do harm may be able to ...

Recent PRs

RSS Feed

chore(deps): bump underscore from 1.13.7 to 1.13.8

vechain/veworld-mobile #3816

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

build(deps): bump underscore from 1.13.7 to 1.13.8 in the npm_and_yarn group across 1 directory

rfverbruggen/azdo-teammembers #995

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Chore(deps): Bump underscore from 1.13.7 to 1.13.8

harryzcy/homepage #55

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

build(deps-dev): bump underscore from 1.13.7 to 1.13.8

qiwi/substrate #1038

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump underscore from 1.13.7 to 1.13.8

TO-Bus/to-bus-ca #236

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 2 comments

Bump underscore from 1.13.7 to 1.13.8

michaelwschultz/hemolog.com #95

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

Bump underscore from 1.13.7 to 1.13.8

Azure/functions-container-action #70

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump underscore from 1.13.7 to 1.13.8

wingsuit-designsystem/wingsuit #327

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 2 comments

deps: bump underscore from 1.13.7 to 1.13.8

City-of-Helsinki/react-helsinki-headless-cms #242

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): bump underscore from 1.13.7 to 1.13.8 in /webapp/wiremock

holomekc/wiremock #1369

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

Bump underscore from 1.13.7 to 1.13.8

plone/plone.app.mosaic #677

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

Bump underscore from 1.8.3 to 1.13.8

dblock/slack-pongbot #1

1.8.3 → 1.13.8 Minor PR

Open 3 months ago 1 comment

Bump underscore from 1.13.7 to 1.13.8 in /monolith-to-microservices

wangwei1237/wangwei1237.github.io #333

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 2 comments

chore(deps): bump underscore from 1.13.7 to 1.13.8 in /.npm

nervosnetwork/ckb-system-scripts #103

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump underscore from 1.13.7 to 1.13.8

collective/collective.z3cform.datagridfield #231

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump underscore from 1.13.7 to 1.13.8

LBHackney-IT/document-evidence-store-frontend #354

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 3 comments

Bump underscore from 1.13.7 to 1.13.8

joemccann/dillinger #892

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 2 comments

Bump underscore from 1.13.7 to 1.13.8

plone/plone.staticresources #418

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

build: bump underscore from 1.13.7 to 1.13.8

robvanderleek/create-issue-branch #1153

1.13.7 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

build(deps): bump underscore from 1.13.7 to 1.13.8

TheKingTermux/alice #937

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 3 comments

build(deps): bump underscore from 1.5.1 to 1.13.8 in /test/tap/dev-dep-duplicate

sarvex/npm #6

1.5.1 → 1.13.8 Minor PR

Open 3 months ago 1 comment

Bump underscore from 1.13.7 to 1.13.8

xibosignage/xibo-cms #3310

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump underscore from 1.13.7 to 1.13.8

veg/phylotree.js #507

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump underscore from 1.5.1 to 1.13.8

GrandadEvans/amazon-associate #1

1.5.1 → 1.13.8 Minor PR

Open 3 months ago 1 comment

Bump underscore and cordova

Shubhi362/keyValueStorage #28

1.10.2 → 1.13.8 Minor PR

Open 3 months ago 3 comments

Bump underscore and jsdoc in /packages/jsdoc

the-labo/the #181

1.10.2 → 1.13.8 Minor PR

Closed 3 months ago 2 comments

Bump underscore from 1.10.2 to 1.13.8

kudos/combine.fm #392

1.10.2 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

Bump underscore from 1.9.1 to 1.13.8

Dustin4444/openzeppelin-sdk #47

1.9.1 → 1.13.8 Minor PR

Open 3 months ago 2 comments

Bump the npm_and_yarn group across 4 directories with 13 updates

jgeofil/nocodb #24

1.13.2 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 7 directories with 15 updates

jadenblack/nocodb #27

1.13.2 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

Bump the npm_and_yarn group across 48 directories with 4 updates

GloWE3/WebKit-4-Rainbowbeast #57

1.8.3 → 1.13.8 Minor PR

Open 3 months ago 3 comments

Bump the npm_and_yarn group across 45 directories with 5 updates

GloWE3/WebKit-4-Rainbowbeast #56

1.8.3 → 1.13.8 Minor PR

Open 3 months ago 3 comments

chore(deps): bump underscore from 1.9.1 to 1.13.8 in /site

laboratoriobridge/bold #975

1.9.1 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump underscore from 1.13.7 to 1.13.8

ever-co/ever-gauzy #9556

1.13.7 → 1.13.8 Patch PR

Open 3 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 8 updates

myHerbDev/nocodb #18

1.13.2 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 8 updates

TheJ-Erk400/nocodb-dev #14

1.13.2 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

Bump underscore from 1.4.4 to 1.13.8

learningequality/kolibri #14326

1.4.4 → 1.13.8 Minor PR

Open 3 months ago 1 comment

Bump underscore from 1.4.4 to 1.13.8 in /kolibri/plugins/perseus_viewer

learningequality/kolibri #14325

1.4.4 → 1.13.8 Minor PR

Open 3 months ago 1 comment

Bump underscore from 1.13.1 to 1.13.8

AlirezaDarbandi/checkout #14

1.13.1 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump underscore from 1.8.3 to 1.13.8 in /PerformanceTests/Speedometer2.1/resources/todomvc/architecture-examples/backbone

Squarespace/WebKit #64

1.8.3 → 1.13.8 Minor PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 13 updates

NYPL/nypl-library-card-app #583

1.13.1 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump underscore from 1.13.1 to 1.13.8

maple-labs/DeFi-Pulse-Adapters #2

1.13.1 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): bump underscore from 1.13.2 to 1.13.8

deepnote/vscode-deepnote #346

1.13.2 → 1.13.8 Patch PR

Open 3 months ago 1 comment

chore(deps): bump underscore from 1.13.2 to 1.13.8 in /nms

magma/magma #15842

1.13.2 → 1.13.8 Patch PR

Open 3 months ago 4 comments

chore(deps): bump underscore from 1.13.2 to 1.13.8 in /website

paramshah10/params-pantry #43

1.13.2 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump underscore from 1.13.2 to 1.13.8

MichalKurzal/covid19-dashboard #38

1.13.2 → 1.13.8 Patch PR

Closed 3 months ago 1 comment

build(deps): bump underscore from 1.13.2 to 1.13.8

Chronasorg/chronas-api #113

1.13.2 → 1.13.8 Patch PR

Closed 3 months ago 2 comments

Bump underscore from 1.13.4 to 1.13.8

webmasterproT/beekeeper-studio #9

1.13.4 → 1.13.8 Patch PR

Open 3 months ago 1 comment

Bump underscore from 1.6.0 to 1.13.8

kaman1/cognitive-head-hunter #1

1.6.0 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

Bump underscore from 1.8.3 to 1.13.8

D0LLi/icloud-fuckery #6

1.8.3 → 1.13.8 Minor PR

Open 3 months ago 14 comments

Package Details

Name:	`underscore`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/underscore`
JSON API:	View JSON

Security Advisories

2

Active advisories

CRITICAL 1

HIGH 1

View All npm Advisories

Package Information

Description:

JavaScript's functional programming helper library.

Repository:	https://github.com/jashkenas/underscore
Homepage:	https://underscorejs.org
Latest Release:	`1.13.7` almost 2 years ago
Dependent Repos:	738,210
Dependent Packages:	25,330
Downloads:	62,844,288
Ranking:	Top 0.042% by dependent repos Top 0.0307% by downloads Top 0.0044% by dependent pkgs

PR Status

Open 302 (46.8%)

Merged 17 (2.6%)

Closed 314 (48.7%)

PR Types

Minor 242 (37.5%)

Patch 372 (57.7%)

Removal 11 (1.7%)