GHSA lookup
GHSA-XXJR-MMJV-4GPG
Pruva has a verified reproduction for GHSA-XXJR-MMJV-4GPG: lodash: prototype pollution in _.unset/_.omit deletes global prototype methods. The canonical evidence record is REPRO-2026-00134.
REPRO
REPRO-2026-00134
Package
lodash · npm
Severity
MEDIUM
Status
published