Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

JavaScript Library

Lodash

A modern JavaScript utility library delivering modularity performance amp extras.

Official Site:

https://lodash.com/

Severity Summary:

Critical: 2 High: 2 Medium: 6
Reference
Title
Severity
CVE-2026-4800
Lodash Improper Control of Generation of Code (Code Injection) Vulnerability
Critical
CVE-2019-10744
Lodash Other Vulnerability
Critical
CVE-2021-23337
Lodash Improper Neutralization of Special Elements used in a Command (Command Injection) Vulnerability
High
CVE-2020-8203
Lodash Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) Vulnerability
High
CVE-2020-28500
Lodash Other Vulnerability
Medium
CVE-2019-1010266
Lodash Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2018-16487
Lodash Vulnerability
Medium
CVE-2018-3721
Lodash Vulnerability
Medium
CVE-2025-13465
Lodash Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) Vulnerability
Medium
CVE-2026-2950
Lodash Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) Vulnerability
Medium