{"ecosystem":"npm","package":"lodash-es","tool_id":"npm:lodash-es","listed":true,"list_version":"2026-11-05","as_of":"2026-11-05T15:13:19.651Z","version":"4.18.1","version_source":"registry_latest","security_status":"clear","status_basis":"no_match_on_version","verdict":"insufficient","advisories":{"source":"osv","checked":true,"checked_at":"2026-11-05T14:33:16.058Z","matching_version":0,"other_versions":8,"any_version":8,"malicious_records":0,"exploited_in_wild":0,"list":[{"id":"GHSA-xxjr-mmjv-4gpg","kind":"vulnerability","aliases":["CVE-2025-13465"],"affects_version":false,"fixed":["4.17.23"],"published":"2026-01-21T23:01:22Z","url":"https://osv.dev/vulnerability/GHSA-xxjr-mmjv-4gpg"},{"id":"GHSA-f23m-r3pf-42rh","kind":"vulnerability","aliases":["CVE-2026-2950"],"affects_version":false,"fixed":["4.18.1"],"published":"2026-04-01T23:50:27Z","url":"https://osv.dev/vulnerability/GHSA-f23m-r3pf-42rh"},{"id":"GHSA-r5fr-rjxr-66jc","kind":"vulnerability","aliases":["CVE-2026-4800"],"affects_version":false,"fixed":["4.18.0"],"published":"2026-04-01T23:51:12Z","url":"https://osv.dev/vulnerability/GHSA-r5fr-rjxr-66jc"},{"id":"GHSA-35jh-r3h4-6jhm","kind":"vulnerability","aliases":["CVE-2021-23337"],"affects_version":false,"fixed":["4.17.21"],"published":"2021-05-06T16:05:51Z","url":"https://osv.dev/vulnerability/GHSA-35jh-r3h4-6jhm"},{"id":"GHSA-x5rq-j2xg-h7qm","kind":"vulnerability","aliases":["CVE-2019-1010266","SNYK-JS-LODASH-73639"],"affects_version":false,"fixed":["4.17.11"],"published":"2019-07-19T16:13:07Z","url":"https://osv.dev/vulnerability/GHSA-x5rq-j2xg-h7qm"},{"id":"GHSA-jf85-cpcp-j695","kind":"vulnerability","aliases":["CVE-2019-10744","SNYK-JS-LODASH-450202"],"affects_version":false,"fixed":["4.17.14"],"published":"2019-07-10T19:45:23Z","url":"https://osv.dev/vulnerability/GHSA-jf85-cpcp-j695"},{"id":"GHSA-29mw-wpgm-hmr9","kind":"vulnerability","aliases":["CVE-2020-28500"],"affects_version":false,"fixed":["4.17.21"],"published":"2022-01-06T20:30:46Z","url":"https://osv.dev/vulnerability/GHSA-29mw-wpgm-hmr9"},{"id":"GHSA-p6mc-m468-83gw","kind":"vulnerability","aliases":["CVE-2020-8203"],"affects_version":false,"fixed":["4.17.20"],"published":"2020-07-15T19:15:48Z","url":"https://osv.dev/vulnerability/GHSA-p6mc-m468-83gw"}],"list_url":"https://osv.dev/list?ecosystem=npm&q=lodash-es"},"field_reports":{"on_version":0,"outcomes":null,"people":0,"verified_people":0,"forge_score":null,"all_versions":0,"versions_reported":[],"tool_page_url":null},"skill_scan":null,"other_versions_flagged":[],"check":{"tool":"forge_check","mcp_server":"https://theagentforge.io/mcp/public","arguments":{"id":"npm:lodash-es","version":"4.18.1"},"rest_url":"https://theagentforge.io/api/v1/check?id=npm%3Alodash-es&version=4.18.1","cli":"npx @theagentforge/cli check npm:lodash-es@4.18.1"},"sources":{"osv":"https://osv.dev/list?ecosystem=npm&q=lodash-es","registry":"https://www.npmjs.com/package/lodash-es","methodology":"https://theagentforge.io/methodology"},"page_url":"https://theagentforge.io/is-it-safe/npm/lodash-es","markdown_url":"https://theagentforge.io/is-it-safe/npm/lodash-es.md"}