lodash
4.18.1 · 1 Apr 2026MIT136.3M / weekRepositoryHomepagenpmAtom feed
Your version
2.4.0
26 Nov 20132.4.2 is the newest release of 2.x.
Security
5 advisories affect 2.4.0; 4.18.0 fixes them
- CriticalPrototype Pollution in lodashGHSA-jf85-cpcp-j695 · 10 Jul 2019Fixed in 4.17.12
- HighCommand Injection in lodashGHSA-35jh-r3h4-6jhm · 6 May 2021Fixed in 4.17.21
- HighPrototype Pollution in lodashGHSA-4xc9-xhrj-v574 · 7 Feb 2019Fixed in 4.17.11
- Moderatelodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`GHSA-f23m-r3pf-42rh · 1 Apr 2026Fixed in 4.18.0
- ModeratePrototype Pollution in lodashGHSA-fvqr-27wr-82fm · 26 Jul 2018Fixed in 4.17.5
Release note
No note was found for 2.4.0 on GitHub or in the repository's changelog.