1. Lodash Security Patch v4.18.1 Addresses Critical Template Injection Vulnerability (CVE-2026-4800)
A critical security vulnerability in the ubiquitous JavaScript utility library Lodash has been patched, exposing a path for remote code execution. The flaw, tracked as CVE-2026-4800, resides in the `_.template` function and stems from incomplete validation of user input. While a previous patch (CVE-2021-23337) secured ...