GHSA-r5fr-rjxr-66jc: lodash vulnerable to Code Injection via `_.template` imports key names | AI Sec Watch