.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

lodash-es 4.17.20 vulnerabilities

8 advisories known · lodash-es@4.17.20 · 4 affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Affects 4.17.20

SEVERITYADVISORYPUBLISHED

Highlodash vulnerable to Code Injection via `_.template` imports key namesGHSA-r5fr-rjxr-66jcCVE-2026-4800Affected >=4.0.0 <4.18.0Fixed in 4.18.0OSV source ↗7 months ago

HighCommand Injection in lodashGHSA-35jh-r3h4-6jhmCVE-2021-23337Affected <4.17.21Fixed in 4.17.21OSV source ↗5 years ago

MediumLodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functionsGHSA-xxjr-mmjv-4gpgCVE-2025-13465Affected >=4.0.0 <4.17.23Fixed in 4.17.23OSV source ↗10 months ago

MediumRegular Expression Denial of Service (ReDoS) in lodashGHSA-29mw-wpgm-hmr9CVE-2020-28500Affected >=4.0.0 <4.17.21Fixed in 4.17.21OSV source ↗5 years ago

Does not affect 4.17.20

SEVERITYADVISORYPUBLISHED

CriticalPrototype Pollution in lodashGHSA-jf85-cpcp-j695CVE-2019-10744SNYK-JS-LODASH-450202Affected <4.17.14Fixed in 4.17.14OSV source ↗7 years ago

HighPrototype Pollution in lodashGHSA-p6mc-m468-83gwCVE-2020-8203Affected >=3.7.0 <4.17.20Fixed in 4.17.20OSV source ↗6 years ago

Mediumlodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtGHSA-f23m-r3pf-42rhCVE-2026-2950Affected >=4.17.23 <4.18.1Fixed in 4.18.1OSV source ↗7 months ago

MediumRegular Expression Denial of Service (ReDoS) in lodashGHSA-x5rq-j2xg-h7qmCVE-2019-1010266SNYK-JS-LODASH-73639Affected >=4.7.0 <4.17.11Fixed in 4.17.11OSV source ↗7 years ago