VDB
RHSA-2026%3A2651
RHSA-2026%3A2651
PUBLISHED
CVSS 8.199999809265137 HIGH
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-cluster-etcd-rhel9-operator@sha256:1962030b425b7f82f4c8c469ffcef683812b5db872e979b79ed37dc5ea846bcc_s390x as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/ose-cluster-etcd-rhel9-operator@sha256:1962030b425b7f82f4c8c469ffcef683812b5db872e979b79ed37dc5ea846bcc_s390x, registry.redhat.io/openshift4/ose-cluster-etcd-rhel9-operator@sha256:1962030b425b7f82f4c8c469ffcef683812b5db872e979b79ed37dc5ea846bcc_s390x, * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-external-snapshotter-rhel9@sha256:876514aed9a73d8292c0991e4b0fd2149a0948664866465344df23c78570b87b_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/ose-csi-external-snapshotter-rhel9@sha256:876514aed9a73d8292c0991e4b0fd2149a0948664866465344df23c78570b87b_ppc64le, *, * |
| Red Hat | registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:1e4965eb7edc6bcd2012a793d8807010a28ceefed8be07f2dbccb71483f816a8_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | *, *, registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:1e4965eb7edc6bcd2012a793d8807010a28ceefed8be07f2dbccb71483f816a8_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-network-metrics-daemon-rhel9@sha256:9db4fade92b7afb7b8b3245a07d3a9555d07693922a643bc59d4baac9143218c_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/ose-network-metrics-daemon-rhel9@sha256:9db4fade92b7afb7b8b3245a07d3a9555d07693922a643bc59d4baac9143218c_amd64, registry.redhat.io/openshift4/ose-network-metrics-daemon-rhel9@sha256:9db4fade92b7afb7b8b3245a07d3a9555d07693922a643bc59d4baac9143218c_amd64, registry.redhat.io/openshift4/ose-network-metrics-daemon-rhel9@sha256:9db4fade92b7afb7b8b3245a07d3a9555d07693922a643bc59d4baac9143218c_amd64 |
| Red Hat | registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9@sha256:9724b9881cd5ac8c7de63f09c6f7ac9035704fbb85134ac46134f9a55be02da8_s390x as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9@sha256:9724b9881cd5ac8c7de63f09c6f7ac9035704fbb85134ac46134f9a55be02da8_s390x, registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9@sha256:9724b9881cd5ac8c7de63f09c6f7ac9035704fbb85134ac46134f9a55be02da8_s390x, * |
| Red Hat | registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:56b96296aacd03dd698217d8bf098404f4d2291f32028bb2dc09bb64cbbfbf43_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:56b96296aacd03dd698217d8bf098404f4d2291f32028bb2dc09bb64cbbfbf43_ppc64le, registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:56b96296aacd03dd698217d8bf098404f4d2291f32028bb2dc09bb64cbbfbf43_ppc64le, * |
| Red Hat | registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2a9ea1cb2e5db3bd504fce6249ee797074eefa094dc26f1e0ce7850647e9695d_s390x as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2a9ea1cb2e5db3bd504fce6249ee797074eefa094dc26f1e0ce7850647e9695d_s390x, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-ibmcloud-machine-controllers-rhel9@sha256:6ffbcbc4448317201f4359228451d5ae6a6d382ed31a40b4375ce1e985145c96_s390x as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/ose-ibmcloud-machine-controllers-rhel9@sha256:6ffbcbc4448317201f4359228451d5ae6a6d382ed31a40b4375ce1e985145c96_s390x, registry.redhat.io/openshift4/ose-ibmcloud-machine-controllers-rhel9@sha256:6ffbcbc4448317201f4359228451d5ae6a6d382ed31a40b4375ce1e985145c96_s390x, * |
| Red Hat | registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:fd0a9d7a2575c0163a1d63839d26bd36b08d5a2a8ab57c800b2e580e76d090d6_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:fd0a9d7a2575c0163a1d63839d26bd36b08d5a2a8ab57c800b2e580e76d090d6_ppc64le, registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:fd0a9d7a2575c0163a1d63839d26bd36b08d5a2a8ab57c800b2e580e76d090d6_ppc64le, * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-cloud-controller-manager-rhel9@sha256:bab16630021bbe8219493999e41a065d301e8cb1d11eee2db281e8f71b5c11d6_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/ose-gcp-cloud-controller-manager-rhel9@sha256:bab16630021bbe8219493999e41a065d301e8cb1d11eee2db281e8f71b5c11d6_ppc64le, *, registry.redhat.io/openshift4/ose-gcp-cloud-controller-manager-rhel9@sha256:bab16630021bbe8219493999e41a065d301e8cb1d11eee2db281e8f71b5c11d6_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-tests-rhel9@sha256:aa878a6683ec179e86b9b40a058d933a5a7aeb2a21ae77357a16ca2aa458b385_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/ose-tests-rhel9@sha256:aa878a6683ec179e86b9b40a058d933a5a7aeb2a21ae77357a16ca2aa458b385_arm64, registry.redhat.io/openshift4/ose-tests-rhel9@sha256:aa878a6683ec179e86b9b40a058d933a5a7aeb2a21ae77357a16ca2aa458b385_arm64, registry.redhat.io/openshift4/ose-tests-rhel9@sha256:aa878a6683ec179e86b9b40a058d933a5a7aeb2a21ae77357a16ca2aa458b385_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-nutanix-cloud-controller-manager-rhel9@sha256:7e78f27505a55702b7f98635d75fa527d80ec6155ddb642807d75ecb76d38ee3_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/ose-nutanix-cloud-controller-manager-rhel9@sha256:7e78f27505a55702b7f98635d75fa527d80ec6155ddb642807d75ecb76d38ee3_amd64, registry.redhat.io/openshift4/ose-nutanix-cloud-controller-manager-rhel9@sha256:7e78f27505a55702b7f98635d75fa527d80ec6155ddb642807d75ecb76d38ee3_amd64, registry.redhat.io/openshift4/ose-nutanix-cloud-controller-manager-rhel9@sha256:7e78f27505a55702b7f98635d75fa527d80ec6155ddb642807d75ecb76d38ee3_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-oauth-server-rhel9@sha256:69eb09deef7ab8f16da5f3dc777cd2931563f4b282e6766a4bb8554800f0e9e2_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/ose-oauth-server-rhel9@sha256:69eb09deef7ab8f16da5f3dc777cd2931563f4b282e6766a4bb8554800f0e9e2_arm64, registry.redhat.io/openshift4/ose-oauth-server-rhel9@sha256:69eb09deef7ab8f16da5f3dc777cd2931563f4b282e6766a4bb8554800f0e9e2_arm64, registry.redhat.io/openshift4/ose-oauth-server-rhel9@sha256:69eb09deef7ab8f16da5f3dc777cd2931563f4b282e6766a4bb8554800f0e9e2_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-capi-rhel9-operator@sha256:bf9f443392bf1b88ad9803e189575b539bdc31d548292ea10989af294df67f5e_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | *, *, registry.redhat.io/openshift4/ose-cluster-capi-rhel9-operator@sha256:bf9f443392bf1b88ad9803e189575b539bdc31d548292ea10989af294df67f5e_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-openshift-controller-manager-rhel9-operator@sha256:706c7405dae50213a03792de3066a0009a2731fde702b82594d36be5c3b9809f_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/ose-cluster-openshift-controller-manager-rhel9-operator@sha256:706c7405dae50213a03792de3066a0009a2731fde702b82594d36be5c3b9809f_amd64, *, registry.redhat.io/openshift4/ose-cluster-openshift-controller-manager-rhel9-operator@sha256:706c7405dae50213a03792de3066a0009a2731fde702b82594d36be5c3b9809f_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-bootstrap-rhel9@sha256:0040c4b191e15cade5a89eb5bcd8d4b3fdca29a2f17291450391306806f7edd1_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/ose-cluster-bootstrap-rhel9@sha256:0040c4b191e15cade5a89eb5bcd8d4b3fdca29a2f17291450391306806f7edd1_ppc64le, registry.redhat.io/openshift4/ose-cluster-bootstrap-rhel9@sha256:0040c4b191e15cade5a89eb5bcd8d4b3fdca29a2f17291450391306806f7edd1_ppc64le, * |
| Red Hat | registry.redhat.io/openshift4/insights-runtime-extractor-rhel9@sha256:2d1242595ed5e57e1e0be7c2a9e78cb8b960e5473b01669e53ca8e5cc41d50c5_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/insights-runtime-extractor-rhel9@sha256:2d1242595ed5e57e1e0be7c2a9e78cb8b960e5473b01669e53ca8e5cc41d50c5_amd64, *, registry.redhat.io/openshift4/insights-runtime-extractor-rhel9@sha256:2d1242595ed5e57e1e0be7c2a9e78cb8b960e5473b01669e53ca8e5cc41d50c5_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:4e5a229dbf10114c398d458d06a2f75def26cd990fd2164dce85014fe49223b7_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:4e5a229dbf10114c398d458d06a2f75def26cd990fd2164dce85014fe49223b7_ppc64le, registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:4e5a229dbf10114c398d458d06a2f75def26cd990fd2164dce85014fe49223b7_ppc64le, registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:4e5a229dbf10114c398d458d06a2f75def26cd990fd2164dce85014fe49223b7_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-docker-registry-rhel9@sha256:a300d632bfc969eeacc95277a2ca222c433cb072f9b01f39726a00f7667fedd5_s390x as a component of Red Hat OpenShift Container Platform 4.19 | *, registry.redhat.io/openshift4/ose-docker-registry-rhel9@sha256:a300d632bfc969eeacc95277a2ca222c433cb072f9b01f39726a00f7667fedd5_s390x, registry.redhat.io/openshift4/ose-docker-registry-rhel9@sha256:a300d632bfc969eeacc95277a2ca222c433cb072f9b01f39726a00f7667fedd5_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-ibm-cloud-controller-manager-rhel9@sha256:f221865aabe326ad00483f45bfd536fe8ff75324388cbf47b544bb091d59cf9e_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | registry.redhat.io/openshift4/ose-ibm-cloud-controller-manager-rhel9@sha256:f221865aabe326ad00483f45bfd536fe8ff75324388cbf47b544bb091d59cf9e_amd64, *, registry.redhat.io/openshift4/ose-ibm-cloud-controller-manager-rhel9@sha256:f221865aabe326ad00483f45bfd536fe8ff75324388cbf47b544bb091d59cf9e_amd64 |
…and 638 more
Timeline
- Feb 18, 2026 CVE Published
- May 5, 2026 Distribution Patch
- May 5, 2026 Distribution Patch
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- Jul 18, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2026:2651 advisory
- https://access.redhat.com/security/cve/CVE-2025-13465 advisory
- https://access.redhat.com/security/cve/CVE-2025-65637 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2651.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2431740 issue
- https://www.cve.org/CVERecord?id=CVE-2025-13465 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-13465 advisory
- https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2418900 issue
- https://www.cve.org/CVERecord?id=CVE-2025-65637 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-65637 advisory
- https://github.com/mjuanxd/logrus-dos-poc exploit
- https://github.com/mjuanxd/logrus-dos-poc/blob/main/README.md exploit
- https://github.com/sirupsen/logrus/issues/1370 advisory
- https://github.com/sirupsen/logrus/pull/1376 advisory
- https://github.com/sirupsen/logrus/releases/tag/v1.8.3 advisory
- https://github.com/sirupsen/logrus/releases/tag/v1.9.1 advisory
- https://github.com/sirupsen/logrus/releases/tag/v1.9.3 advisory
- https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMSIRUPSENLOGRUS-5564391 advisory