CVE-2026-4800 CVE-2026-2950 lodash vulnerable to Code Injection via _.template imports key names lodash vulnerable to Prototype Pollution via array path bypass in _.unset and _.omit#978
Merged
vharseko merged 2 commits intoApr 2, 2026
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=32){kind=avatar}