lodash.omit
npm2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting lodash.omitpage 1 of 1
- CVE-2025-13465MEDIUMCVSS 5.3EG 6.5fixed in 4.18.02026-01-21
The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes. The issue permits deletion of properties but does not allow o…
- CVE-2026-2950MEDIUMCVSS 5.3EG 6.5fixed in 4.18.02026-03-31
The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution. The fix for CVE-2025-13465 only guards against string key members, so an attacker can bypass the check by passing array-wrapped path segments. This allows de…
Check whether lodash.omit is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for lodash.omit CVEs against the assets you own.
Book a Demo →