Skip to content

CVE-2026-4800 CVE-2026-2950 lodash vulnerable to Code Injection via _.template imports key names lodash vulnerable to Prototype Pollution via array path bypass in _.unset and _.omit#978

Merged
vharseko merged 2 commits intomasterfrom
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/lodash-4.18.1
Apr 2, 2026
Merged

CVE-2026-4800 CVE-2026-2950 lodash vulnerable to Code Injection via _.template imports key names lodash vulnerable to Prototype Pollution via array path bypass in _.unset and _.omit#978
vharseko merged 2 commits intomasterfrom
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/lodash-4.18.1

Commits

Commits on Apr 2, 2026