lodash.template-fixed

lodash.template v4.5.0 The Lodash method .template exported as a Node.js module. Installation Using npm: $ sudo -H npm i -g npm $ npm i --save lodash.template In Node.js: var template = require'lodash.template'; See the documentation or package source for more details...

CLSA-2026-1784682758 TuxCare security update for lodash.template (1 CVE)

TuxCare rebuilt lodash.template to address 1 CVE. Fixed in 4.4.0-tuxcare.1...

09-nodejs (1.0.0), 11.17r (1.0.0) +561 more potentially affected by CVE-2021-23337 +1 more via lodash.template (>=4.0.0, <=4.5.0)

lodash.template NPM version =4.0.0, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.1, =1.0.1-0.beta.1, =1.0.0-beta.1, =1.1.5 - @arezooq/webserverpackage 1.0.0 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: OSV:GHSA-R5FR-RJXR-66JC...

org.webjars.npm:autolinker (>=0.24.1, <=0.28.1), org.webjars.npm:github-com-mattslocum-ng-webworker (0.2.3) +10 more potentially affected by CVE-2021-23337 +1 more via org.webjars.npm:lodash.template (4.5.0)

org.webjars.npm:lodash.template MAVEN version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:lodash.template and may be impacted: - org.webjars.npm:autolinker =0.24.1, =2.9.0, =1.8.12, =3.5.0, =2.3.4, =2.5.17-beta.0 -...

09-nodejs (1.0.0), 11.17r (1.0.0) +561 more potentially affected by CVE-2021-23337 +1 more via lodash.template (>=4.0.0, <=4.5.0)

lodash.template NPM version =4.0.0, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.1, =1.0.1-0.beta.1, =1.0.0-beta.1, =1.1.5 - @arezooq/webserverpackage 1.0.0 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: SNYK:JS-LODASHTEMPLATE-15869628...

09-nodejs (1.0.0), 11.17r (1.0.0) +337 more potentially affected by CVE-2021-23337 +1 more via lodash.template (>=4.0.0, <=4.4.0)

lodash.template NPM version =4.0.0, =0.0.2, =0.0.1, =0.1.0, =1.0.1-0.beta.1, =1.0.0-beta.1, =1.0.0, =1.0.0-alpha.0, =1.1.0, =0.0.79, =0.0.120-2 and more Source cves: CVE-2021-23337, CVE-2026-4800 Source advisory: OSV:GHSA-35JH-R3H4-6JHM...

Code Injection

Overview lodash.template is a The Lodash method .template exported as a Node.js module. Affected versions of this package are vulnerable to Code Injection due the improper validation of options.variable key names in .template. An attacker can execute arbitrary code at template compilation time by...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02-infrastructure (1.0.0) +54186 more potentially affected by CVE-2021-23337 via lodash.template (>=2.2.1, <=4.18.1)

lodash.template NPM version =2.2.1, =1.0.1, =0.0.2, =0.0.10 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...