{"ecosystem":"npm","package":"lodash","tool_id":"npm:lodash","listed":true,"list_version":"2026-11-05","as_of":"2026-11-05T14:34:05.578Z","version":"4.18.1","version_source":"registry_latest","security_status":"clear","status_basis":"no_match_on_version","verdict":"insufficient","advisories":{"source":"osv","checked":true,"checked_at":"2026-11-05T14:09:15.369Z","matching_version":0,"other_versions":10,"any_version":10,"malicious_records":0,"exploited_in_wild":0,"list":[{"id":"GHSA-xxjr-mmjv-4gpg","kind":"vulnerability","aliases":["CVE-2025-13465"],"affects_version":false,"fixed":["4.17.23"],"published":"2026-01-21T23:01:22Z","url":"https://osv.dev/vulnerability/GHSA-xxjr-mmjv-4gpg"},{"id":"GHSA-f23m-r3pf-42rh","kind":"vulnerability","aliases":["CVE-2026-2950"],"affects_version":false,"fixed":["4.18.1"],"published":"2026-04-01T23:50:27Z","url":"https://osv.dev/vulnerability/GHSA-f23m-r3pf-42rh"},{"id":"GHSA-r5fr-rjxr-66jc","kind":"vulnerability","aliases":["CVE-2026-4800"],"affects_version":false,"fixed":["4.18.0"],"published":"2026-04-01T23:51:12Z","url":"https://osv.dev/vulnerability/GHSA-r5fr-rjxr-66jc"},{"id":"GHSA-35jh-r3h4-6jhm","kind":"vulnerability","aliases":["CVE-2021-23337"],"affects_version":false,"fixed":["4.17.21"],"published":"2021-05-06T16:05:51Z","url":"https://osv.dev/vulnerability/GHSA-35jh-r3h4-6jhm"},{"id":"GHSA-x5rq-j2xg-h7qm","kind":"vulnerability","aliases":["CVE-2019-1010266","SNYK-JS-LODASH-73639"],"affects_version":false,"fixed":["4.17.11"],"published":"2019-07-19T16:13:07Z","url":"https://osv.dev/vulnerability/GHSA-x5rq-j2xg-h7qm"},{"id":"GHSA-jf85-cpcp-j695","kind":"vulnerability","aliases":["CVE-2019-10744","SNYK-JS-LODASH-450202"],"affects_version":false,"fixed":["4.17.12"],"published":"2019-07-10T19:45:23Z","url":"https://osv.dev/vulnerability/GHSA-jf85-cpcp-j695"},{"id":"GHSA-29mw-wpgm-hmr9","kind":"vulnerability","aliases":["CVE-2020-28500"],"affects_version":false,"fixed":["4.17.21"],"published":"2022-01-06T20:30:46Z","url":"https://osv.dev/vulnerability/GHSA-29mw-wpgm-hmr9"},{"id":"GHSA-p6mc-m468-83gw","kind":"vulnerability","aliases":["CVE-2020-8203"],"affects_version":false,"fixed":["4.17.19"],"published":"2020-07-15T19:15:48Z","url":"https://osv.dev/vulnerability/GHSA-p6mc-m468-83gw"},{"id":"GHSA-4xc9-xhrj-v574","kind":"vulnerability","aliases":["CVE-2018-16487"],"affects_version":false,"fixed":["4.17.11"],"published":"2019-02-07T18:16:48Z","url":"https://osv.dev/vulnerability/GHSA-4xc9-xhrj-v574"},{"id":"GHSA-fvqr-27wr-82fm","kind":"vulnerability","aliases":["CVE-2018-3721"],"affects_version":false,"fixed":["4.17.5"],"published":"2018-07-26T15:14:52Z","url":"https://osv.dev/vulnerability/GHSA-fvqr-27wr-82fm"}],"list_url":"https://osv.dev/list?ecosystem=npm&q=lodash"},"field_reports":{"on_version":0,"outcomes":null,"people":0,"verified_people":0,"forge_score":null,"all_versions":0,"versions_reported":[],"tool_page_url":null},"skill_scan":null,"other_versions_flagged":[],"check":{"tool":"forge_check","mcp_server":"https://theagentforge.io/mcp/public","arguments":{"id":"npm:lodash","version":"4.18.1"},"rest_url":"https://theagentforge.io/api/v1/check?id=npm%3Alodash&version=4.18.1","cli":"npx @theagentforge/cli check npm:lodash@4.18.1"},"sources":{"osv":"https://osv.dev/list?ecosystem=npm&q=lodash","registry":"https://www.npmjs.com/package/lodash","methodology":"https://theagentforge.io/methodology"},"page_url":"https://theagentforge.io/is-it-safe/npm/lodash","markdown_url":"https://theagentforge.io/is-it-safe/npm/lodash.md"}