npm

lodash.template

Security advisories for lodash.template, newest first. 1 known, all fixed. If you’re on 4.18.0 or later, none of them affect you.

RSS feed Check your lock file →

Latest version

4.18.1

Advisories

1 · 0 unfixed

Last advisory

1 Apr 2026

Safe from

4.18.0

1 advisory · newest first

HIGH8.1 1 Apr 2026

lodash vulnerable to Code Injection via `_.template` imports key names

GHSA-r5fr-rjxr-66jc · CVE-2026-4800

Affected

≥ 4.0.0, < 4.18.0

Fixed in

4.18.0

Published

1 Apr 2026

/advisories/npm/lodash.template/feed.rss

From the GitHub advisory database, via OSV · synced hourly

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →