`underscore`

Ecosystem:
npm

Package URL:
pkg:npm/underscore

Total PRs:
644 Dependabot PRs

Latest PR:
9 days ago

Unique Repositories:
460 repositories

Unique Repos (30 days):
21 repositories

Security Advisories

Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack

GHSA-qpx9-hpmf-5gmw CVE-2026-27601 HIGH published 3 months ago • updated 5 days ago

### Impact In simple words, some programs that use `_.flatten` or `_.isEqual` could be made to crash. Someone who wants to do harm may be able to ...

1.12.1 → 1.13.8 Minor PR

Closed 14 days ago 1 comment

Bump the npm_and_yarn group across 19 directories with 16 updates

Cyptopimpinainteazy/DEXTOOLSweb3.js #7

1.9.1 → 1.13.8 Minor PR

Open 15 days ago 1 comment

Bump the npm_and_yarn group across 18 directories with 16 updates

Cyptopimpinainteazy/DEXTOOLSweb3.js #6

1.9.1 → 1.13.8 Minor PR

Closed 15 days ago 2 comments

build(deps): bump the web-npm-security-minor-patch group across 1 directory with 23 updates

elkozmon/zoonavigator #159

1.12.1 → 1.13.8 Minor PR

Closed 16 days ago 1 comment

build(deps): bump the web-npm-minor-patch group across 1 directory with 9 updates

elkozmon/zoonavigator #152

1.12.1 → 1.13.8 Minor PR

Closed 16 days ago 2 comments

Bump the npm_and_yarn group across 1 directory with 22 updates

firstorg555/NodeGoat #5

1.9.1 → 1.13.8 Minor PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 39 updates

luislobo/sails-0.12-upgrade-to-1 #1

1.4.4 → 1.13.8 Minor PR

Open about 2 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 8 updates

sumonst21/dropbox-sdk-js #11

1.10.2 → 1.13.8 Minor PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 17 directories with 5 updates

0x-jerry/patch-package #16

1.12.0 → 1.13.8 Minor PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 31 updates

luislobo/sails-hook-rbac-example #1

1.4.4 → 1.13.8 Minor PR

Open 2 months ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 26 updates

CaligraLtd/Ulauncher #2

1.9.1 → 1.13.8 Minor PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 14 updates

IsaacBell/ember-string-helpers #1

1.8.3 → 1.13.8 Minor PR

Open 2 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 22 directories with 19 updates

lkeff/sentry-javascript #126

1.12.1 → 1.13.8 Minor PR

Closed 2 months ago 1 comment

Bump underscore from 1.7.0 to 1.13.8

Uninett/nav #3941

1.7.0 → 1.13.8 Minor PR

Open 2 months ago 6 comments

Bump the npm_and_yarn group across 1 directory with 3 updates

not-a-ethan/React-practice #8

1.12.1 → 1.13.6 Minor PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 3 updates

K1ngHandy/Profile-View #23

1.12.1 → 1.13.6 Minor PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 24 updates

mitchelfalcon/atom-1 #13

1.9.1 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 6 directories with 3 updates

balajirajput96/microsoft-365-agents-toolkit #39

1.12.1 → 1.13.8 Minor PR

Open 3 months ago 1 comment

chore(deps): Bump the npm_and_yarn group across 15 directories with 17 updates

pboling/sentry-javascript #19

1.12.1 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 11 directories with 14 updates

twcctz200/sentry-javascript #61

1.12.1 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 5 updates

ParadiseSS13/Paradise #31732

1.12.1 → 1.13.6 Minor PR

Open 3 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 22 directories with 20 updates

lkeff/sentry-javascript #101

1.12.1 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 3 directories with 3 updates

equal-shares/equal-shares #32

1.12.1 → 1.13.6 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 4 updates

commercetools-demo/contentools #21

1.12.1 → 1.13.6 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 50 directories with 8 updates

GloWE3/WebKit-4-Rainbowbeast #62

1.6.0 → 1.13.8 Minor PR

Open 3 months ago 3 comments

build(deps): bump the npm_and_yarn group across 9 directories with 6 updates

Kimduegab/microsoft-365-agents-toolkit #20

1.12.1 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 50 directories with 5 updates

GloWE3/WebKit-4-Rainbowbeast #59

1.6.0 → 1.13.8 Minor PR

Open 3 months ago 4 comments

Bump the npm_and_yarn group across 20 directories with 6 updates

Enterprizethirteen/Oryx #21

1.8.3 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 49 directories with 4 updates

GloWE3/WebKit-4-Rainbowbeast #58

1.6.0 → 1.13.8 Minor PR

Closed 3 months ago 4 comments

Bump underscore from 1.8.3 to 1.13.8

dblock/slack-pongbot #1

1.8.3 → 1.13.8 Minor PR

Open 3 months ago 1 comment

build(deps): bump underscore from 1.5.1 to 1.13.8 in /test/tap/dev-dep-duplicate

sarvex/npm #6

1.5.1 → 1.13.8 Minor PR

Open 3 months ago 1 comment

Bump underscore from 1.5.1 to 1.13.8

GrandadEvans/amazon-associate #1

1.5.1 → 1.13.8 Minor PR

Open 3 months ago 1 comment

Bump underscore and cordova

Shubhi362/keyValueStorage #28

1.10.2 → 1.13.8 Minor PR

Open 3 months ago 3 comments

Bump underscore and jsdoc in /packages/jsdoc

the-labo/the #181

1.10.2 → 1.13.8 Minor PR

Closed 3 months ago 2 comments

Bump underscore from 1.10.2 to 1.13.8

kudos/combine.fm #392

1.10.2 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

Bump underscore from 1.9.1 to 1.13.8

Dustin4444/openzeppelin-sdk #47

1.9.1 → 1.13.8 Minor PR

Open 3 months ago 2 comments

Bump the npm_and_yarn group across 48 directories with 4 updates

GloWE3/WebKit-4-Rainbowbeast #57

1.8.3 → 1.13.8 Minor PR

Open 3 months ago 3 comments

Bump the npm_and_yarn group across 45 directories with 5 updates

GloWE3/WebKit-4-Rainbowbeast #56

1.8.3 → 1.13.8 Minor PR

Open 3 months ago 3 comments

chore(deps): bump underscore from 1.9.1 to 1.13.8 in /site

laboratoriobridge/bold #975

1.9.1 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

Bump underscore from 1.4.4 to 1.13.8

learningequality/kolibri #14326

1.4.4 → 1.13.8 Minor PR

Open 3 months ago 1 comment

Bump underscore from 1.4.4 to 1.13.8 in /kolibri/plugins/perseus_viewer

learningequality/kolibri #14325

1.4.4 → 1.13.8 Minor PR

Open 3 months ago 1 comment

Bump underscore from 1.8.3 to 1.13.8 in /PerformanceTests/Speedometer2.1/resources/todomvc/architecture-examples/backbone

Squarespace/WebKit #64

1.8.3 → 1.13.8 Minor PR

Open 3 months ago 1 comment

Bump underscore from 1.6.0 to 1.13.8

kaman1/cognitive-head-hunter #1

1.6.0 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

Bump underscore from 1.8.3 to 1.13.8

D0LLi/icloud-fuckery #6

1.8.3 → 1.13.8 Minor PR

Open 3 months ago 14 comments

Bump the npm_and_yarn group across 44 directories with 2 updates

akishaha/vsts-tasks #25

1.8.3 → 1.13.8 Minor PR

Closed 3 months ago 2 comments

Bump the npm_and_yarn group across 38 directories with 2 updates

akishaha/vsts-tasks #22

1.8.3 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 35 directories with 2 updates

akishaha/vsts-tasks #21

1.8.3 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

Bump underscore from 1.12.1 to 1.13.8

compiler-explorer/conanproxy #60

1.12.1 → 1.13.8 Minor PR

Closed 3 months ago 2 comments

Bump underscore from 1.12.1 to 1.13.8

transloadit/notify-url-proxy #11

1.12.1 → 1.13.8 Minor PR

Closed 3 months ago 1 comment

chore(deps): update underscore requirement from ^1.12.1 to ^1.13.7 in /superset-frontend/plugins/legacy-preset-chart-deckgl

RuslanKralin/superset #53

^1.12.1 → ^1.13.7 Minor PR

Open 4 months ago 1 comment

Package Details

Name:	`underscore`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/underscore`
JSON API:	View JSON

Security Advisories

2

Active advisories

CRITICAL 1

HIGH 1

View All npm Advisories

Package Information

Description:

JavaScript's functional programming helper library.

Repository:	https://github.com/jashkenas/underscore
Homepage:	https://underscorejs.org
Latest Release:	`1.13.7` almost 2 years ago
Dependent Repos:	738,210
Dependent Packages:	25,330
Downloads:	62,844,288
Ranking:	Top 0.042% by dependent repos Top 0.0307% by downloads Top 0.0044% by dependent pkgs

PR Status

Open 301 (46.7%)

Merged 17 (2.6%)

Closed 314 (48.8%)

PR Types

Minor 242 (37.6%)

Patch 371 (57.6%)

Removal 11 (1.7%)

underscore

Security Advisories

Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack

Arbitrary Code Execution in underscore

Recent PRs (filtered by: Minor PRs )

Package Details

Security Advisories

2

Package Information

PR Status

PR Types

`underscore`