Tag

lodash-npm

Safeguard articles tagged "lodash-npm" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source

Lodash on npm: Prototype Pollution Risks and the Safe Version

The lodash npm package is everywhere, and older versions carry real prototype pollution CVEs. Here are the fixed versions and how to check what your tree resolves to.

Jan 22, 20255 min read