These are all security issues fixed in the nodejs-underscore-1.13.1-1.3 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "nodejs-underscore": "1.13.1-1.3" } ] }