VDB
RHSA-2026%3A2661
RHSA-2026%3A2661
PUBLISHED
CVSS 8.199999809265137 HIGH
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:88c33650ed5fa280c4ceee17f63bc94acb3e31bac6ce0ff922537044c62ac170_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:88c33650ed5fa280c4ceee17f63bc94acb3e31bac6ce0ff922537044c62ac170_amd64, registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:88c33650ed5fa280c4ceee17f63bc94acb3e31bac6ce0ff922537044c62ac170_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d996ae5e72eb8bd4584b5b51b1bb56c4f1573caa0791c5e66a5c89d850ef3dc1_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d996ae5e72eb8bd4584b5b51b1bb56c4f1573caa0791c5e66a5c89d850ef3dc1_amd64, registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d996ae5e72eb8bd4584b5b51b1bb56c4f1573caa0791c5e66a5c89d850ef3dc1_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-multus-route-override-cni-rhel9@sha256:c6a713980f98015bc170590afbe2f48b3c4addbd7ff19eee4af2be4b431b3dc8_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-multus-route-override-cni-rhel9@sha256:c6a713980f98015bc170590afbe2f48b3c4addbd7ff19eee4af2be4b431b3dc8_arm64, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:4d336c3a625d32606df94aff5194969a6b3e20bd8586c56baacd509bcdb066f0_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:4d336c3a625d32606df94aff5194969a6b3e20bd8586c56baacd509bcdb066f0_ppc64le, registry.redhat.io/openshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:4d336c3a625d32606df94aff5194969a6b3e20bd8586c56baacd509bcdb066f0_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-scheduler-rhel9-operator@sha256:d4ce3e07bfee07e11573773846eb94c759a6d648c06db0bfa2dda1f0110b9f84_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-cluster-kube-scheduler-rhel9-operator@sha256:d4ce3e07bfee07e11573773846eb94c759a6d648c06db0bfa2dda1f0110b9f84_arm64, *, registry.redhat.io/openshift4/ose-cluster-kube-scheduler-rhel9-operator@sha256:d4ce3e07bfee07e11573773846eb94c759a6d648c06db0bfa2dda1f0110b9f84_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-prom-label-proxy-rhel9@sha256:acd05d00f32c61bb6fa2a544887dd218002e2135a0de1acf7896571768735aa2_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-prom-label-proxy-rhel9@sha256:acd05d00f32c61bb6fa2a544887dd218002e2135a0de1acf7896571768735aa2_arm64, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:56aea13311a96784e84b4c5713ff5693e6aaf9f6035a042c5a28879019e3eaa1_s390x as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:56aea13311a96784e84b4c5713ff5693e6aaf9f6035a042c5a28879019e3eaa1_s390x, *, registry.redhat.io/openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:56aea13311a96784e84b4c5713ff5693e6aaf9f6035a042c5a28879019e3eaa1_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-machine-api-rhel9-operator@sha256:a4623c62d9f7b6fed32b40d539815a3814c74338bf5974976b4dd1ccf8eeafab_s390x as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-machine-api-rhel9-operator@sha256:a4623c62d9f7b6fed32b40d539815a3814c74338bf5974976b4dd1ccf8eeafab_s390x, registry.redhat.io/openshift4/ose-machine-api-rhel9-operator@sha256:a4623c62d9f7b6fed32b40d539815a3814c74338bf5974976b4dd1ccf8eeafab_s390x, * |
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d9b30068f814c6c1bcf9798e35ae70480c993dabfb5d88209b48f149cb49e6a5_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d9b30068f814c6c1bcf9798e35ae70480c993dabfb5d88209b48f149cb49e6a5_arm64, registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:d9b30068f814c6c1bcf9798e35ae70480c993dabfb5d88209b48f149cb49e6a5_arm64, * |
| Red Hat | registry.redhat.io/openshift4/ose-baremetal-machine-controllers-rhel9@sha256:fde0b6709806f4fa012e86093d3abba689c7e4dce25859df9993d02f77adac38_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-baremetal-machine-controllers-rhel9@sha256:fde0b6709806f4fa012e86093d3abba689c7e4dce25859df9993d02f77adac38_ppc64le, *, registry.redhat.io/openshift4/ose-baremetal-machine-controllers-rhel9@sha256:fde0b6709806f4fa012e86093d3abba689c7e4dce25859df9993d02f77adac38_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-olm-rukpak-rhel9@sha256:ed1989895d9f856d4cfcc6e4709233883e0dc7b9bbd2443d10d826eaa899b734_s390x as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-olm-rukpak-rhel9@sha256:ed1989895d9f856d4cfcc6e4709233883e0dc7b9bbd2443d10d826eaa899b734_s390x, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-powervs-machine-controllers-rhel9@sha256:44305451a86fa2140f50c3a6e9d430f84aa4015834d51d406fa5847bee846d04_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-powervs-machine-controllers-rhel9@sha256:44305451a86fa2140f50c3a6e9d430f84aa4015834d51d406fa5847bee846d04_amd64, registry.redhat.io/openshift4/ose-powervs-machine-controllers-rhel9@sha256:44305451a86fa2140f50c3a6e9d430f84aa4015834d51d406fa5847bee846d04_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-olm-rhel9-operator@sha256:34d1ed337dac313194803cbe7336560b7a630adc9cd2bd785883be5048ca52dc_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-cluster-olm-rhel9-operator@sha256:34d1ed337dac313194803cbe7336560b7a630adc9cd2bd785883be5048ca52dc_ppc64le, registry.redhat.io/openshift4/ose-cluster-olm-rhel9-operator@sha256:34d1ed337dac313194803cbe7336560b7a630adc9cd2bd785883be5048ca52dc_ppc64le, registry.redhat.io/openshift4/ose-cluster-olm-rhel9-operator@sha256:34d1ed337dac313194803cbe7336560b7a630adc9cd2bd785883be5048ca52dc_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:88bc1b9cedee4bebf90d217f61b8166ab0457dd245103610369821a64687322f_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:88bc1b9cedee4bebf90d217f61b8166ab0457dd245103610369821a64687322f_amd64, registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:88bc1b9cedee4bebf90d217f61b8166ab0457dd245103610369821a64687322f_amd64, registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:88bc1b9cedee4bebf90d217f61b8166ab0457dd245103610369821a64687322f_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:1bfd1b573bf924cb0a8be80be641b4ce684b141a66325d7c0cc923a9d3a2030a_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:1bfd1b573bf924cb0a8be80be641b4ce684b141a66325d7c0cc923a9d3a2030a_ppc64le, *, * |
| Red Hat | registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:b47c8a889f18a9d9601612c058e1c890308f1603584b626d16ee7bf50af00d4d_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:b47c8a889f18a9d9601612c058e1c890308f1603584b626d16ee7bf50af00d4d_amd64, registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:b47c8a889f18a9d9601612c058e1c890308f1603584b626d16ee7bf50af00d4d_amd64, registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:b47c8a889f18a9d9601612c058e1c890308f1603584b626d16ee7bf50af00d4d_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-csi-external-attacher-rhel9@sha256:d30598bb001578c4b9e99ab1d5040af35a27b1b5c7503d566b0672d634ef9f1e_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, *, registry.redhat.io/openshift4/ose-csi-external-attacher-rhel9@sha256:d30598bb001578c4b9e99ab1d5040af35a27b1b5c7503d566b0672d634ef9f1e_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-csi-external-attacher-rhel9@sha256:e9cb3fec3be65cd06e6fe00d2954b8302e12814701e1906ad91833ef18a01fab_s390x as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-csi-external-attacher-rhel9@sha256:e9cb3fec3be65cd06e6fe00d2954b8302e12814701e1906ad91833ef18a01fab_s390x, registry.redhat.io/openshift4/ose-csi-external-attacher-rhel9@sha256:e9cb3fec3be65cd06e6fe00d2954b8302e12814701e1906ad91833ef18a01fab_s390x, registry.redhat.io/openshift4/ose-csi-external-attacher-rhel9@sha256:e9cb3fec3be65cd06e6fe00d2954b8302e12814701e1906ad91833ef18a01fab_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:aad8e6a28b5544fd9e8db6641fcd2a85474eb04f87cd3823792710fae0e127c8_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:aad8e6a28b5544fd9e8db6641fcd2a85474eb04f87cd3823792710fae0e127c8_ppc64le, *, registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:aad8e6a28b5544fd9e8db6641fcd2a85474eb04f87cd3823792710fae0e127c8_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-csi-external-snapshotter-rhel9@sha256:8bc5aeae1421310f6f635cb1679cf3145a158a8549bda6132526d02f533527cf_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-csi-external-snapshotter-rhel9@sha256:8bc5aeae1421310f6f635cb1679cf3145a158a8549bda6132526d02f533527cf_ppc64le, registry.redhat.io/openshift4/ose-csi-external-snapshotter-rhel9@sha256:8bc5aeae1421310f6f635cb1679cf3145a158a8549bda6132526d02f533527cf_ppc64le, registry.redhat.io/openshift4/ose-csi-external-snapshotter-rhel9@sha256:8bc5aeae1421310f6f635cb1679cf3145a158a8549bda6132526d02f533527cf_ppc64le |
…and 640 more
Timeline
- Feb 18, 2026 CVE Published
- May 5, 2026 Distribution Patch
- May 5, 2026 Distribution Patch
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- Jul 18, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2026:2661 advisory
- https://access.redhat.com/security/cve/CVE-2025-13465 advisory
- https://access.redhat.com/security/cve/CVE-2025-58068 advisory
- https://access.redhat.com/security/cve/CVE-2025-65637 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2661.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2431740 issue
- https://www.cve.org/CVERecord?id=CVE-2025-13465 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-13465 advisory
- https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2391958 issue
- https://www.cve.org/CVERecord?id=CVE-2025-58068 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-58068 advisory
- https://github.com/eventlet/eventlet/commit/0bfebd1117d392559e25b4bfbfcc941754de88fb advisory
- https://github.com/eventlet/eventlet/pull/1062 advisory
- https://github.com/eventlet/eventlet/security/advisories/GHSA-hw6f-rjfj-j7j7 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2418900 issue
- https://www.cve.org/CVERecord?id=CVE-2025-65637 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-65637 advisory
- https://github.com/mjuanxd/logrus-dos-poc exploit
…and 7 more