https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T23:10:43.616748+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/ghsa-xxjr-mmjv-4gpg GHSA-xxjr-mmjv-4gpg — Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions 2026-10-06T23:10:43.656859+00:00

Affected: npm: lodash, npm: lodash.unset, npm: lodash-es, npm: lodash-amd

### Impact

Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the `_.unset` and `_.omit` functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.

The issue permits deletion of properties but does not allow overwriting their original behavior.

### Patches

This issue is patched on 4.17.23.