[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTRRQlEtAt8GmmySmHpo4bmqz_9t4Xp4f1QkwWEF7Dpo":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":64,"topProductsByCves":65,"seoMetadata":67,"meta":76},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":18},18172,"lodash",1,7,0,192,"2021-02-15","l",[16],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},104522,"Lodash is a technology vendor with 1 tracked product and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,28,34,40,47,53,58],{"cveId":21,"description":22,"publishedDate":13,"cvssScore":23,"cvssVersion":24,"severity":25,"isKev":26,"epssScore":27},"CVE-2021-23337","Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.",7.2,"v3.1","High",false,0.21333,{"cveId":29,"description":30,"publishedDate":13,"cvssScore":31,"cvssVersion":24,"severity":32,"isKev":26,"epssScore":33},"CVE-2020-28500","Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.",5.3,"Medium",0.07336,{"cveId":35,"description":36,"publishedDate":37,"cvssScore":38,"cvssVersion":24,"severity":25,"isKev":26,"epssScore":39},"CVE-2020-8203","Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.","2020-07-15",7.4,0.05213,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":24,"severity":45,"isKev":26,"epssScore":46},"CVE-2019-10744","Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.","2019-07-26",9.1,"Critical",0.05006,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":24,"severity":32,"isKev":26,"epssScore":52},"CVE-2019-1010266","lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is: 4.17.11.","2019-07-17",6.5,0.03162,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":51,"cvssVersion":24,"severity":32,"isKev":26,"epssScore":57},"CVE-2018-3721","lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify the prototype of \"Object\" via __proto__, causing the addition or modification of an existing property that will exist on all objects.","2018-06-07",0.02347,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":24,"severity":32,"isKev":26,"epssScore":63},"CVE-2018-16487","A prototype pollution vulnerability was found in lodash \u003C4.17.11 where the functions merge, mergeWith, and defaultsDeep can be tricked into adding or modifying properties of Object.prototype.","2019-02-01",5.6,0.01553,[],[66],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":68,"metaDescription":69,"keywords":70,"structuredData":71},"Lodash - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Lodash covering 1 product with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Lodash vulnerabilities, Lodash security, Lodash CVE, Lodash threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":72,"@type":73,"name":74,"description":69,"url":75},"https:\u002F\u002Fschema.org","Organization","Lodash","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flodash",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":77,"apiVersion":78},"2026-10-17T13:19:42.025Z","3.0"]