Skip to content

Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack

High severity GitHub Reviewed Published Mar 3, 2026 in jashkenas/underscore • Updated May 5, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts