underscore-keypath

v0.9.3npm· JavaScript

Adds Key-Path mechanism extensions for underscore

The verdict

Has 1 high-severity advisory. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityUnknown

Security1 advisory

LicenseOther

DepsLean

Maintenance

Last published 10 years ago.

Popularity

Download count unavailable.

Security

1 known advisory (worst: high severity).

License

EPL-1.0

Dependencies

1 direct dependency

Security advisories

Live from OSV.dev · cached 24h

HIGH
underscore-keypath vulnerable to Prototype Pollution
GHSA-gpvc-mx6g-cchv Published 2023-08-01

Recent releases