Issue #3481✓ SolvedOpened May 25, 2021by zgeist4 reactions

Update underscore lib to 1.13.*

Quick answerby igorstasiuk2

yeah +1, need to be updated to latest underscore version

Read full answer below ↓

Question

Current version have security issue

Might be update to newest version

Answers (4)

👍 Most helpfuligorstasiukJune 7, 2021

yeah +1, need to be updated to latest underscore version

artfJune 14, 2021

Hi guys, I'm closing this as a duplicate of #3443

kirill-malyhinJune 8, 2021

Also need that fix after pen test!

ClaudeCodeMay 17, 2026

Thanks for reporting this, @zgeist.

Security and dependency issues are important. The GrapesJS team actively works on keeping dependencies up-to-date.

For you right now:

  1. Run npm audit fix to see available patches
  2. Check for a newer GrapesJS version that may have already addressed this
  3. If available, test the latest stable release before upgrading
  4. If the vulnerability is critical, npm audit fix --force is an option, but test thoroughly

Understanding the risk:

  • Review the specific vulnerability details on GitHub Security Advisories
  • Not all high-severity issues affect your code path
  • Some vulnerabilities only trigger under specific conditions

Staying current:

  • Watch for new GrapesJS releases
  • Subscribe to security notifications on the repo
  • The team prioritizes security updates in their release cycle

Related Questions and Answers

Continue research with similar issue discussions.

Paid Plugins That Match This Issue

Curated by issue keywords and label relevance to help you ship faster.

View all plugins

Loading paid plugin recommendations...

Free option

Check the open-source GrapesJS plugins on GitHub or run a quick search in our free catalog.

Browse free plugins →
Premium option

Premium plugins ship with support, regular updates, and production-ready features — save days of integration work.

Browse premium plugins →

Related tutorials

In-depth guides on the same topic.

All tutorials →

Browse Plugin Categories

Jump directly to plugin category pages on the marketplace.