npm

lodash-amd

5 Total advisories

5 Vulnerabilities

0 Malware

Dependency scanning

Check whether lodash-amd is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

MEDIUM 6.5

npm

CVE-2025-13465

Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functions

Jan 21, 2026

MEDIUM 6.5

npm

CVE-2026-2950

lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAt

Apr 1, 2026

HIGH 8.1

npm

CVE-2026-4800

lodash vulnerable to Code Injection via `_.template` imports key names

Apr 1, 2026

MEDIUM 6.5

npm

CVE-2019-1010266

Regular Expression Denial of Service (ReDoS) in lodash

Jul 19, 2019

CRITICAL 9.1

npm

CVE-2019-10744

Prototype Pollution in lodash

Jul 10, 2019

Browse more npm advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes