VDB
RHSA-2026%3A2078
RHSA-2026%3A2078
PUBLISHED
CVSS 8.199999809265137 HIGH
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-scheduler-rhel9-operator@sha256:6887cc98b25b3274e7e0d8cb37143391a35384b0c4b57eab20e66a78635f8456_s390x as a component of Red Hat OpenShift Container Platform 4.18 | *, *, registry.redhat.io/openshift4/ose-cluster-kube-scheduler-rhel9-operator@sha256:6887cc98b25b3274e7e0d8cb37143391a35384b0c4b57eab20e66a78635f8456_s390x |
| Red Hat | registry.redhat.io/openshift4/ovirt-csi-driver-rhel9-operator@sha256:5c307d0a3c016f1c7997c6387f579649682ac71d89ce2263956395077b9e9a6f_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | *, registry.redhat.io/openshift4/ovirt-csi-driver-rhel9-operator@sha256:5c307d0a3c016f1c7997c6387f579649682ac71d89ce2263956395077b9e9a6f_amd64, registry.redhat.io/openshift4/ovirt-csi-driver-rhel9-operator@sha256:5c307d0a3c016f1c7997c6387f579649682ac71d89ce2263956395077b9e9a6f_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-operator-registry-rhel9@sha256:747e8cc2338fc8634d35106925f63ffcbd1d4de9ab9911f73189b461a0440639_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-operator-registry-rhel9@sha256:747e8cc2338fc8634d35106925f63ffcbd1d4de9ab9911f73189b461a0440639_ppc64le, registry.redhat.io/openshift4/ose-operator-registry-rhel9@sha256:747e8cc2338fc8634d35106925f63ffcbd1d4de9ab9911f73189b461a0440639_ppc64le, registry.redhat.io/openshift4/ose-operator-registry-rhel9@sha256:747e8cc2338fc8634d35106925f63ffcbd1d4de9ab9911f73189b461a0440639_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-cloud-controller-manager-rhel9@sha256:ca52ac4a56d70ecafe95bc5801f9db09ef0690a658007b9e7b5bf46bc624d6a5_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | *, registry.redhat.io/openshift4/ose-gcp-cloud-controller-manager-rhel9@sha256:ca52ac4a56d70ecafe95bc5801f9db09ef0690a658007b9e7b5bf46bc624d6a5_ppc64le, registry.redhat.io/openshift4/ose-gcp-cloud-controller-manager-rhel9@sha256:ca52ac4a56d70ecafe95bc5801f9db09ef0690a658007b9e7b5bf46bc624d6a5_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-openshift-state-metrics-rhel9@sha256:c2b054d3d7ad91b5d6ee1d3af052b2f7b067f6d99582510081eeff29a741d173_s390x as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-openshift-state-metrics-rhel9@sha256:c2b054d3d7ad91b5d6ee1d3af052b2f7b067f6d99582510081eeff29a741d173_s390x, *, registry.redhat.io/openshift4/ose-openshift-state-metrics-rhel9@sha256:c2b054d3d7ad91b5d6ee1d3af052b2f7b067f6d99582510081eeff29a741d173_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus-alertmanager-rhel9@sha256:3a68dad72aaafc2f87798f46ec555c3801c29c923476e9f127923a2d22fcdaee_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-prometheus-alertmanager-rhel9@sha256:3a68dad72aaafc2f87798f46ec555c3801c29c923476e9f127923a2d22fcdaee_ppc64le, registry.redhat.io/openshift4/ose-prometheus-alertmanager-rhel9@sha256:3a68dad72aaafc2f87798f46ec555c3801c29c923476e9f127923a2d22fcdaee_ppc64le, registry.redhat.io/openshift4/ose-prometheus-alertmanager-rhel9@sha256:3a68dad72aaafc2f87798f46ec555c3801c29c923476e9f127923a2d22fcdaee_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-csi-external-resizer-rhel9@sha256:fb58c53e8a21dda0a92c07a90d72d49160e2afa87624df9ebe9704a80da06443_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-csi-external-resizer-rhel9@sha256:fb58c53e8a21dda0a92c07a90d72d49160e2afa87624df9ebe9704a80da06443_amd64, registry.redhat.io/openshift4/ose-csi-external-resizer-rhel9@sha256:fb58c53e8a21dda0a92c07a90d72d49160e2afa87624df9ebe9704a80da06443_amd64, registry.redhat.io/openshift4/ose-csi-external-resizer-rhel9@sha256:fb58c53e8a21dda0a92c07a90d72d49160e2afa87624df9ebe9704a80da06443_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:970d2b060d91324b5f03e7fd1c801156e5f4e41d6fb551b11008080932a3a430_s390x as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:970d2b060d91324b5f03e7fd1c801156e5f4e41d6fb551b11008080932a3a430_s390x, registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:970d2b060d91324b5f03e7fd1c801156e5f4e41d6fb551b11008080932a3a430_s390x, registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:970d2b060d91324b5f03e7fd1c801156e5f4e41d6fb551b11008080932a3a430_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-multus-route-override-cni-rhel9@sha256:e36b1ed0bb4ef74b36f013bc07641a73ee9419ef423b614e2537492f15e796c0_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, registry.redhat.io/openshift4/ose-multus-route-override-cni-rhel9@sha256:e36b1ed0bb4ef74b36f013bc07641a73ee9419ef423b614e2537492f15e796c0_arm64, registry.redhat.io/openshift4/ose-multus-route-override-cni-rhel9@sha256:e36b1ed0bb4ef74b36f013bc07641a73ee9419ef423b614e2537492f15e796c0_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9@sha256:912c21e65b0ef96435a6ae10600f216887edad9217318af692dc0ae3c8d637d6_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | *, registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9@sha256:912c21e65b0ef96435a6ae10600f216887edad9217318af692dc0ae3c8d637d6_amd64, registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9@sha256:912c21e65b0ef96435a6ae10600f216887edad9217318af692dc0ae3c8d637d6_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-operator-framework-tools-rhel9@sha256:ec6b7c399892fe1ac26a9d2ab290b1345b6539d1cf4f80deb6a2156fb4b78c98_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-operator-framework-tools-rhel9@sha256:ec6b7c399892fe1ac26a9d2ab290b1345b6539d1cf4f80deb6a2156fb4b78c98_arm64, registry.redhat.io/openshift4/ose-operator-framework-tools-rhel9@sha256:ec6b7c399892fe1ac26a9d2ab290b1345b6539d1cf4f80deb6a2156fb4b78c98_arm64, registry.redhat.io/openshift4/ose-operator-framework-tools-rhel9@sha256:ec6b7c399892fe1ac26a9d2ab290b1345b6539d1cf4f80deb6a2156fb4b78c98_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-cluster-api-controllers-rhel9@sha256:4371b3f2da0dba7f1f71d84a8c7c76fafdf2c14f38c9c25e6909c39675a9a411_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-gcp-cluster-api-controllers-rhel9@sha256:4371b3f2da0dba7f1f71d84a8c7c76fafdf2c14f38c9c25e6909c39675a9a411_arm64, registry.redhat.io/openshift4/ose-gcp-cluster-api-controllers-rhel9@sha256:4371b3f2da0dba7f1f71d84a8c7c76fafdf2c14f38c9c25e6909c39675a9a411_arm64, registry.redhat.io/openshift4/ose-gcp-cluster-api-controllers-rhel9@sha256:4371b3f2da0dba7f1f71d84a8c7c76fafdf2c14f38c9c25e6909c39675a9a411_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:3e7c9a81f18a12d869942b358d8129fa87bd7bc76fc7294592023b2b8cfc3530_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:3e7c9a81f18a12d869942b358d8129fa87bd7bc76fc7294592023b2b8cfc3530_arm64, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-etcd-rhel9-operator@sha256:d81ce04e9bea535bec9d89141478016e730689a5707a8baa0c00b759026c9ff1_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-cluster-etcd-rhel9-operator@sha256:d81ce04e9bea535bec9d89141478016e730689a5707a8baa0c00b759026c9ff1_arm64, registry.redhat.io/openshift4/ose-cluster-etcd-rhel9-operator@sha256:d81ce04e9bea535bec9d89141478016e730689a5707a8baa0c00b759026c9ff1_arm64, registry.redhat.io/openshift4/ose-cluster-etcd-rhel9-operator@sha256:d81ce04e9bea535bec9d89141478016e730689a5707a8baa0c00b759026c9ff1_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:9cc929a24b77561f95a99c01658031a5280a0eb4df9019ee44904bc3be39dee9_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:9cc929a24b77561f95a99c01658031a5280a0eb4df9019ee44904bc3be39dee9_arm64, registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:9cc929a24b77561f95a99c01658031a5280a0eb4df9019ee44904bc3be39dee9_arm64, registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:9cc929a24b77561f95a99c01658031a5280a0eb4df9019ee44904bc3be39dee9_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-oauth-server-rhel9@sha256:43a2964421b945492a295f46a1406ea4692121513a9dcfb1dc5f710c395c5759_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-oauth-server-rhel9@sha256:43a2964421b945492a295f46a1406ea4692121513a9dcfb1dc5f710c395c5759_arm64, registry.redhat.io/openshift4/ose-oauth-server-rhel9@sha256:43a2964421b945492a295f46a1406ea4692121513a9dcfb1dc5f710c395c5759_arm64, registry.redhat.io/openshift4/ose-oauth-server-rhel9@sha256:43a2964421b945492a295f46a1406ea4692121513a9dcfb1dc5f710c395c5759_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-autoscaler-rhel9@sha256:15ca95ec6be6e8857e32cee07ad1fa43de52744052e13bf491adb78727b68357_s390x as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-cluster-autoscaler-rhel9@sha256:15ca95ec6be6e8857e32cee07ad1fa43de52744052e13bf491adb78727b68357_s390x, registry.redhat.io/openshift4/ose-cluster-autoscaler-rhel9@sha256:15ca95ec6be6e8857e32cee07ad1fa43de52744052e13bf491adb78727b68357_s390x, registry.redhat.io/openshift4/ose-cluster-autoscaler-rhel9@sha256:15ca95ec6be6e8857e32cee07ad1fa43de52744052e13bf491adb78727b68357_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-cli-artifacts-rhel9@sha256:6254395aceeeab914ff893ed29a85bc48ecef15ca9fd22d2bf7eccded39706c9_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | *, registry.redhat.io/openshift4/ose-cli-artifacts-rhel9@sha256:6254395aceeeab914ff893ed29a85bc48ecef15ca9fd22d2bf7eccded39706c9_ppc64le, registry.redhat.io/openshift4/ose-cli-artifacts-rhel9@sha256:6254395aceeeab914ff893ed29a85bc48ecef15ca9fd22d2bf7eccded39706c9_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-aws-pod-identity-webhook-rhel9@sha256:9f900752cbf073de4361d0419f195c1a0445f98ca3422a4e85d70a85263c345f_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-aws-pod-identity-webhook-rhel9@sha256:9f900752cbf073de4361d0419f195c1a0445f98ca3422a4e85d70a85263c345f_amd64, registry.redhat.io/openshift4/ose-aws-pod-identity-webhook-rhel9@sha256:9f900752cbf073de4361d0419f195c1a0445f98ca3422a4e85d70a85263c345f_amd64, registry.redhat.io/openshift4/ose-aws-pod-identity-webhook-rhel9@sha256:9f900752cbf073de4361d0419f195c1a0445f98ca3422a4e85d70a85263c345f_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel9@sha256:e9e77c4e1ae9828edb7449243d657235718c7e7083dfe98cc3617b67cd542baf_s390x as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel9@sha256:e9e77c4e1ae9828edb7449243d657235718c7e7083dfe98cc3617b67cd542baf_s390x, registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel9@sha256:e9e77c4e1ae9828edb7449243d657235718c7e7083dfe98cc3617b67cd542baf_s390x, registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel9@sha256:e9e77c4e1ae9828edb7449243d657235718c7e7083dfe98cc3617b67cd542baf_s390x |
…and 638 more
Timeline
- Feb 11, 2026 CVE Published
- May 5, 2026 Distribution Patch
- May 5, 2026 Distribution Patch
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- May 13, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2026:2078 advisory
- https://access.redhat.com/security/cve/CVE-2025-13465 advisory
- https://access.redhat.com/security/cve/CVE-2025-15284 advisory
- https://access.redhat.com/security/cve/CVE-2025-65637 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2078.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2431740 issue
- https://www.cve.org/CVERecord?id=CVE-2025-13465 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-13465 advisory
- https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2425946 issue
- https://www.cve.org/CVERecord?id=CVE-2025-15284 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-15284 advisory
- https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9 advisory
- https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2418900 issue
- https://www.cve.org/CVERecord?id=CVE-2025-65637 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-65637 advisory
- https://github.com/mjuanxd/logrus-dos-poc exploit
- https://github.com/mjuanxd/logrus-dos-poc/blob/main/README.md exploit
…and 6 more