StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · node-lodash

`node-lodash` CVE matrix across Linux distros

21 CVEs tracked across 3 distro releases. Showing the 21 most-recent fix records.

Ecosystems with tracked fixes

Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2018-16487→ fixed in4.17.11+dfsg-1
CVE-2018-3721→ fixed in4.17.11+dfsg-1
CVE-2019-1010266→ fixed in4.17.11+dfsg-1
CVE-2019-10744→ fixed in4.17.15+dfsg-1
CVE-2020-28500→ fixed in4.17.21+dfsg+~cs8.31.173-1
CVE-2020-8203→ fixed in4.17.19+dfsg-1
CVE-2021-23337→ fixed in4.17.21+dfsg+~cs8.31.173-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y node-lodash

Debian bookworm

Source: Debian

CVE-2018-16487→ fixed in4.17.11+dfsg-1
CVE-2018-3721→ fixed in4.17.11+dfsg-1
CVE-2019-1010266→ fixed in4.17.11+dfsg-1
CVE-2019-10744→ fixed in4.17.15+dfsg-1
CVE-2020-28500→ fixed in4.17.21+dfsg+~cs8.31.173-1
CVE-2020-8203→ fixed in4.17.19+dfsg-1
CVE-2021-23337→ fixed in4.17.21+dfsg+~cs8.31.173-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y node-lodash

Debian trixie

Source: Debian

CVE-2018-16487→ fixed in4.17.11+dfsg-1
CVE-2018-3721→ fixed in4.17.11+dfsg-1
CVE-2019-1010266→ fixed in4.17.11+dfsg-1
CVE-2019-10744→ fixed in4.17.15+dfsg-1
CVE-2020-28500→ fixed in4.17.21+dfsg+~cs8.31.173-1
CVE-2020-8203→ fixed in4.17.19+dfsg-1
CVE-2021-23337→ fixed in4.17.21+dfsg+~cs8.31.173-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y node-lodash

Is YOUR node-lodash patched?

5-second check on your actual server. The quickscan reads your installed node-lodash version and matches against the same 21-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)