OsVault/npm/underscore
npm

underscore

2 known vulnerabilities · 0 critical · 1 high

CVE-2026-27601

Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack

Published Mar 3, 2026
CVE-2023-26139HIGH

underscore-keypath vulnerable to Prototype Pollution

Published Aug 1, 2023
Check your entire dependency tree at onceRun dependency scan →