.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

lodash 4.17.5 vulnerabilities

10 advisories known · lodash@4.17.5 · 8 affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Affects 4.17.5

SEVERITYADVISORYPUBLISHED

CriticalPrototype Pollution in lodashGHSA-jf85-cpcp-j695CVE-2019-10744SNYK-JS-LODASH-450202Affected <4.17.12Fixed in 4.17.12OSV source ↗7 years ago

Highlodash vulnerable to Code Injection via `_.template` imports key namesGHSA-r5fr-rjxr-66jcCVE-2026-4800Affected >=4.0.0 <4.18.0Fixed in 4.18.0OSV source ↗7 months ago

HighPrototype Pollution in lodashGHSA-4xc9-xhrj-v574CVE-2018-16487Affected <4.17.11Fixed in 4.17.11OSV source ↗8 years ago

HighPrototype Pollution in lodashGHSA-p6mc-m468-83gwCVE-2020-8203Affected >=3.7.0 <4.17.19Fixed in 4.17.19OSV source ↗6 years ago

HighCommand Injection in lodashGHSA-35jh-r3h4-6jhmCVE-2021-23337Affected <4.17.21Fixed in 4.17.21OSV source ↗5 years ago

MediumLodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functionsGHSA-xxjr-mmjv-4gpgCVE-2025-13465Affected >=4.0.0 <4.17.23Fixed in 4.17.23OSV source ↗10 months ago

MediumRegular Expression Denial of Service (ReDoS) in lodashGHSA-x5rq-j2xg-h7qmCVE-2019-1010266SNYK-JS-LODASH-73639Affected >=4.7.0 <4.17.11Fixed in 4.17.11OSV source ↗7 years ago

MediumRegular Expression Denial of Service (ReDoS) in lodashGHSA-29mw-wpgm-hmr9CVE-2020-28500Affected >=4.0.0 <4.17.21Fixed in 4.17.21OSV source ↗5 years ago

Does not affect 4.17.5

SEVERITYADVISORYPUBLISHED

Mediumlodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtGHSA-f23m-r3pf-42rhCVE-2026-2950Affected >=4.17.23 <4.18.1Fixed in 4.18.1OSV source ↗7 months ago

MediumPrototype Pollution in lodashGHSA-fvqr-27wr-82fmCVE-2018-3721Affected <4.17.5Fixed in 4.17.5OSV source ↗8 years ago