underscore
Ecosystem:
npm
npm
Package URL:
pkg:npm/underscore
Total PRs:
644 Dependabot PRs
644 Dependabot PRs
Latest PR:
9 days ago
9 days ago
Unique Repositories:
460 repositories
460 repositories
Unique Repos (30 days):
21 repositories
21 repositories
Security Advisories
Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack
GHSA-qpx9-hpmf-5gmw
CVE-2026-27601
HIGH
published 3 months ago
• updated 5 days ago
### Impact
In simple words, some programs that use `_.flatten` or `_.isEqual` could be made to crash. Someone who wants to do harm may be able to ...
Arbitrary Code Execution in underscore
GHSA-cf4h-3jhx-xvhq
CVE-2021-23358
CRITICAL
published about 5 years ago
• updated 7 days ago
The package `underscore` from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Execution via the templat...
Recent PRs (filtered by: Closed )
build(deps): bump the web-npm-minor-patch group in /web with 9 updates
1.12.1 → 1.13.8
Minor PR
Closed
14 days ago
1 comment
Bump the npm_and_yarn group across 18 directories with 16 updates
Cyptopimpinainteazy/DEXTOOLSweb3.js #6
1.9.1 → 1.13.8
Minor PR
Closed
15 days ago
2 comments
chore(deps): Bump the npm_and_yarn group across 1 directory with 7 updates
ry-ops/ATSFlow #16
1.13.7 → 1.13.8
Patch PR
Closed
16 days ago
2 comments
build(deps): bump the web-npm-security-minor-patch group across 1 directory with 23 updates
1.12.1 → 1.13.8
Minor PR
Closed
16 days ago
1 comment
build(deps): bump the web-npm-minor-patch group across 1 directory with 9 updates
1.12.1 → 1.13.8
Minor PR
Closed
16 days ago
2 comments
Bump the npm_and_yarn group across 2 directories with 23 updates
1.13.6 → 1.13.8
Patch PR
Closed
20 days ago
1 comment
chore(deps): bump the npm_and_yarn group across 7 directories with 22 updates
Reality2byte/spectrum-web-components #256
1.13.7 → 1.13.8
Patch PR
Closed
27 days ago
1 comment
Bump the npm_and_yarn group across 15 directories with 19 updates
1.13.7 → 1.13.8
Patch PR
Closed
about 1 month ago
1 comment
chore(deps): bump the npm_and_yarn group across 3 directories with 21 updates
akiojin/agents #32
1.13.7 → 1.13.8
Patch PR
Closed
about 1 month ago
1 comment
chore(deps): bump the npm_and_yarn group across 4 directories with 27 updates
1.13.4 → 1.13.8
Patch PR
Closed
about 1 month ago
1 comment
chore(deps): bump the npm_and_yarn group across 4 directories with 27 updates
1.13.4 → 1.13.8
Patch PR
Closed
about 1 month ago
1 comment
Bump the npm_and_yarn group across 1 directory with 16 updates
1.13.6 → 1.13.8
Patch PR
Closed
about 1 month ago
1 comment
build(deps): bump the npm_and_yarn group across 2 directories with 11 updates
1.13.7 → 1.13.8
Patch PR
Closed
about 1 month ago
2 comments
chore(deps): bump the npm_and_yarn group across 1 directory with 12 updates
saytyarnorngloreia/codemod #13
1.13.6 → 1.13.8
Patch PR
Closed
about 1 month ago
1 comment
Bump the npm_and_yarn group across 1 directory with 22 updates
1.9.1 → 1.13.8
Minor PR
Closed
about 2 months ago
1 comment
chore(deps): bump the npm_and_yarn group across 22 directories with 22 updates
1.13.6 → 1.13.8
Patch PR
Closed
about 2 months ago
1 comment
Bump the npm_and_yarn group across 1 directory with 19 updates
NYPL/nypl-library-card-app #682
1.13.1 → 1.13.8
Patch PR
Closed
about 2 months ago
2 comments
fix(deps)(deps): bump the npm_and_yarn group across 1 directory with 8 updates
oss-slu/material-derailleur #473
1.13.7 → 1.13.8
Patch PR
Closed
about 2 months ago
1 comment
build(deps): bump the npm_and_yarn group across 4 directories with 27 updates
1.13.7 → 1.13.8
Patch PR
Closed
about 2 months ago
1 comment
chore(deps): bump the npm_and_yarn group across 17 directories with 19 updates
1.13.6 → 1.13.8
Patch PR
Closed
about 2 months ago
1 comment
Bump the npm_and_yarn group across 13 directories with 16 updates
1.13.4 → 1.13.8
Patch PR
Closed
about 2 months ago
1 comment
Bump the npm_and_yarn group across 1 directory with 29 updates
hoangnam-esign/file-storage #10
1.13.7 → 1.13.8
Patch PR
Closed
about 2 months ago
1 comment
Bump the npm_and_yarn group across 1 directory with 28 updates
hoangnam-esign/file-storage #8
1.13.7 → 1.13.8
Patch PR
Closed
about 2 months ago
1 comment
Bump the npm_and_yarn group across 4 directories with 20 updates
1.13.6 → 1.13.8
Patch PR
Closed
about 2 months ago
1 comment
Bump the npm_and_yarn group across 13 directories with 26 updates
1.13.7 → 1.13.8
Patch PR
Closed
about 2 months ago
1 comment
Bump the npm_and_yarn group across 3 directories with 24 updates
Aremixdj/gitpod #46
1.13.6 → 1.13.8
Patch PR
Closed
about 2 months ago
1 comment
Bump the npm_and_yarn group across 12 directories with 25 updates
1.13.7 → 1.13.8
Patch PR
Closed
about 2 months ago
1 comment
chore(deps): bump the npm_and_yarn group across 13 directories with 27 updates
1.13.6 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
Bump the npm_and_yarn group across 1 directory with 15 updates
saytyarnorngloreia/kitsune #24
1.13.6 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
build(deps): bump the npm_and_yarn group across 6 directories with 10 updates
Edwindareck23/firebase-js-sdk #29
1.13.7 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
Bump the npm_and_yarn group across 1 directory with 16 updates
1.13.6 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
Bump the npm_and_yarn group across 10 directories with 23 updates
1.13.7 → 1.13.8
Patch PR
Closed
2 months ago
3 comments
Bump the npm_and_yarn group across 10 directories with 23 updates
1.13.7 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
Bump the npm_and_yarn group across 1 directory with 14 updates
saytyarnorngloreia/kitsune #23
1.13.6 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
chore(deps): bump the npm_and_yarn group across 16 directories with 22 updates
jgeofil/nocobase #18
1.13.6 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
Bump the npm_and_yarn group across 7 directories with 16 updates
1.13.6 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
Bump the npm_and_yarn group across 10 directories with 23 updates
1.13.7 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
chore(deps): bump the npm_and_yarn group across 16 directories with 24 updates
1.13.6 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
chore(deps): bump the npm_and_yarn group across 16 directories with 24 updates
1.13.6 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates
1.13.6 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
Bump the npm_and_yarn group across 1 directory with 8 updates
1.10.2 → 1.13.8
Minor PR
Closed
2 months ago
1 comment
chore(deps): bump the npm_and_yarn group across 16 directories with 25 updates
jgeofil/nocobase #14
1.13.6 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
chore(deps): bump the npm_and_yarn group across 4 directories with 16 updates
1.13.6 → 1.13.8
Patch PR
Closed
2 months ago
2 comments
chore(deps): bump the npm_and_yarn group across 2 directories with 15 updates
1.13.6 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
Bump the npm_and_yarn group across 1 directory with 15 updates
1.13.7 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
Bump the npm_and_yarn group across 17 directories with 5 updates
1.12.0 → 1.13.8
Minor PR
Closed
2 months ago
1 comment
Bump the npm_and_yarn group across 6 directories with 11 updates
jgeofil/nocodb #43
1.13.2 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
chore(deps): bump the npm_and_yarn group across 2 directories with 16 updates
1.13.6 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
Bump the npm_and_yarn group across 4 directories with 25 updates
1.13.6 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
Bump the npm_and_yarn group across 4 directories with 20 updates
1.13.4 → 1.13.8
Patch PR
Closed
2 months ago
1 comment
Package Details
| Name: | underscore |
| Ecosystem: | npm |
| PURL Type: | npm |
| Package URL: | pkg:npm/underscore |
| JSON API: | View JSON |
Security Advisories
Package Information
Description:
JavaScript's functional programming helper library.
| Repository: | https://github.com/jashkenas/underscore |
| Homepage: | https://underscorejs.org |
| Latest Release: |
1.13.7
almost 2 years ago |
| Dependent Repos: | 738,210 |
| Dependent Packages: | 25,330 |
| Downloads: | 62,844,288 |
| Ranking: | Top 0.042% by dependent repos Top 0.0307% by downloads Top 0.0044% by dependent pkgs |