lodash
4.18.1 · 1 Apr 2026MIT136.3M / weekRepositoryHomepagenpmAtom feed
Your version
4.18.0
31 Mar 20264.18.1 is the newest release of 4.x.
Security
Fixes 2 advisories that affected 4.17.23
- Highlodash vulnerable to Code Injection via `_.template` imports key namesGHSA-r5fr-rjxr-66jc · 1 Apr 2026Fixed in 4.18.0
- Moderatelodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`GHSA-f23m-r3pf-42rh · 1 Apr 2026Fixed in 4.18.0
Release note
No note was found for 4.18.0 on GitHub or in the repository's changelog.