Skip to content

PatchFirst · Latest vulnerabilities

underscore vulnerabilities

Vulnerabilities published for underscore in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerability: 1

CVE-2021-23358
Low · CVSS 3.3EPSS 4.2%Fix available
Arbitrary Code Injection
The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.
underscore Operating systems
- Update to 1.7.0~dfsg-1ubuntu1.1
Published March 29, 2021Updated November 3, 2025
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →