COOEY // HUBcompliance · community · intelligence

FAIL › dossier

lodash-es product

1
failure events
0
zero-days
1
RCEs
0
on KEV
0
critical
40
worst shame

Dossier not yet built — the RAG curator builds one for players with ≥2 failure events (factory/dossier.py). The failure history and sentiment below are live.

Failure history 1 events

DateEventSevFlagsShameSummary
2026-03-31 CVE-2026-4800 high ⚡RCE 40 Impact: The fix for CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm) added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. When an a