Lodash lodash.omit

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-2950< 4.18.0lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`MEDIUM 6.50.3 %
CVE-2025-134654.0.0 – < 4.18.0Prototype Pollution Vulnerability in Lodash _.unset and _.omit functionsMEDIUM 6.91.8 %