ZDF
Sign inSign up

Tools

CVE version checker

Answer “am I affected?” with catalog ranges — not a CVE description dump. Supports multi-CVE batches, optional package/ecosystem filters, and package inventory lookup when you do not know the CVE id yet.

Provide CVE + version to evaluate ranges. Or provide only a package name to list catalog CVEs that name that package.

CVEs naming package “lodash”

Pick a CVE, keep the package filled, add your version, and re-run. Returning visitors can bookmark the query string.

  • CVE-2026-4800 — lodash vulnerable to Code Injection via imports key names
  • CVE-2026-2950 — The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.
  • CVE-2025-13465 — The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.
  • CVE-2021-23337 — Command Injection in lodash