Description
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
Remediation
References
Related Vulnerabilities
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-34305)
WordPress Plugin Custom Post Type Relations Cross-Site Scripting (1.0)
MediaWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-58025)
Joomla! Core 1.7.x Information Disclosure (1.7.0 - 1.7.3)
WordPress Plugin Invoicing with InvoiceXpress for WooCommerce-Free Cross-Site Scripting (3.0.2)