Lodash lodash
- CVE-2026-4800 lodash vulnerable to Code Injection via `_.template` imports key names 2.8%
- CVE-2026-2950 lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` 0.3%
- CVE-2025-13465 Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions 1.8%