Severity: High

Description: SAS Infrastructure for Risk Management 3.8 contains Underscore.js 1.13.4, which has the following vulnerability:

• CVE-2026-27601

Potential Impact: See the CVE record for additional information.