56,966 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a08755-6ceb-722c-901b-fde095f6cb64

Why Most Lodash Vulnerability Reports Get Rejected

blog.ulisesgascon.com · published 22 July 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.ulisesgascon.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 16
Words captured: 1,930

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

The Future of Lodash Read at the source ↗

blog.ulisesgascon.com

https://github.com/lodash/lodash/blob/main/threat-model.md

github.com

https://github.com/lodash/lodash/blob/main/GOVERNANCE.md

github.com

https://cna.openjsf.org/

cna.openjsf.org

https://gitnation.com/contents/what-is-a-vulnerability-and-whats-not-making-sense-of-nodejs-and-express-threat-models

gitnation.com

Node.js Official Threat Model Read at the source ↗

https://github.com/expressjs/security-wg/blob/main/docs/ThreatModel.md

github.com

https://www.youtube.com/watch?v=LUsiFV3dsK8

youtube.com

https://nvd.nist.gov/vuln/detail/CVE-2019-10744

nvd.nist.gov

https://app.opencve.io/cve/?vendor=lodash

app.opencve.io

https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg

github.com

https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh

github.com

What CVE-2025-13465 Teaches Us About Prototype Pollution in JavaScript Read at the source ↗

https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc

github.com

https://nvd.nist.gov/vuln/detail/CVE-2021-23337

nvd.nist.gov

https://github.com/lodash/lodash/blob/main/SECURITY.md

github.com