VDB
RHSA-2026%3A2984
RHSA-2026%3A2984
PUBLISHED
CVSS 8.199999809265137 HIGH
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:70e034cc00f919777e176e0619ce7bb8b37120453fa6ce7671f30a0f902f1da5_amd64 as a component of Red Hat OpenShift Container Platform 4.21 | *, registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:70e034cc00f919777e176e0619ce7bb8b37120453fa6ce7671f30a0f902f1da5_amd64, registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:70e034cc00f919777e176e0619ce7bb8b37120453fa6ce7671f30a0f902f1da5_amd64 |
| Red Hat | registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e7b03b1bad85588cf7a20b9ef4d88a00ef39f0cdc0545a1b612b5a796860b02e_s390x as a component of Red Hat OpenShift Container Platform 4.21 | *, registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e7b03b1bad85588cf7a20b9ef4d88a00ef39f0cdc0545a1b612b5a796860b02e_s390x, * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:94dd72f9cb0c009fea6927db9dd26d02819eb56c141301889f8729fe5d29c70e_amd64 as a component of Red Hat OpenShift Container Platform 4.21 | *, registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:94dd72f9cb0c009fea6927db9dd26d02819eb56c141301889f8729fe5d29c70e_amd64, * |
| Red Hat | registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e449df4d21c3ba372dc7d70db844e8f294ff532f2a83c34cdb41885d32d65b7e_amd64 as a component of Red Hat OpenShift Container Platform 4.21 | *, registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e449df4d21c3ba372dc7d70db844e8f294ff532f2a83c34cdb41885d32d65b7e_amd64, * |
| Red Hat | registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9@sha256:9a00a9d4e08d7ba27d12538379f21766bc199235d557ebfbcdede15a879cccd2_ppc64le as a component of Red Hat OpenShift Container Platform 4.21 | registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9@sha256:9a00a9d4e08d7ba27d12538379f21766bc199235d557ebfbcdede15a879cccd2_ppc64le, *, * |
| Red Hat | registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:c10383074fc1ecd27ca64e320fce56cbd0c06c11c5c66d318f882f45c73e1db5_arm64 as a component of Red Hat OpenShift Container Platform 4.21 | registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:c10383074fc1ecd27ca64e320fce56cbd0c06c11c5c66d318f882f45c73e1db5_arm64, *, registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:c10383074fc1ecd27ca64e320fce56cbd0c06c11c5c66d318f882f45c73e1db5_arm64 |
| Red Hat | registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:c8a953f6b8b1aae24e2b99d1d8e03769462b3e420c585ace69019c460384a911_amd64 as a component of Red Hat OpenShift Container Platform 4.21 | registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:c8a953f6b8b1aae24e2b99d1d8e03769462b3e420c585ace69019c460384a911_amd64, *, registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:c8a953f6b8b1aae24e2b99d1d8e03769462b3e420c585ace69019c460384a911_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:f63edf76e4d41437713160dec80403c3c636746463891aaa99261da671997884_amd64 as a component of Red Hat OpenShift Container Platform 4.21 | registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:f63edf76e4d41437713160dec80403c3c636746463891aaa99261da671997884_amd64, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:fbbdda54d2845d43d0d1f1148fc8f4a48c405dca0ab1184f2cecf3e0edc95bdb_arm64 as a component of Red Hat OpenShift Container Platform 4.21 | registry.redhat.io/openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:fbbdda54d2845d43d0d1f1148fc8f4a48c405dca0ab1184f2cecf3e0edc95bdb_arm64, *, registry.redhat.io/openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:fbbdda54d2845d43d0d1f1148fc8f4a48c405dca0ab1184f2cecf3e0edc95bdb_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7643a991a51a241d8d8941e1a921645f5b65df06adcce843a70a05a376688bb4_s390x as a component of Red Hat OpenShift Container Platform 4.21 | registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7643a991a51a241d8d8941e1a921645f5b65df06adcce843a70a05a376688bb4_s390x, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-api-provider-openstack-rhel9@sha256:d6d34b4b086b9f64615932eddca9d811e1f1fcd9fc431be2bfd6cf5ef1dcb1c0_s390x as a component of Red Hat OpenShift Container Platform 4.21 | registry.redhat.io/openshift4/ose-machine-api-provider-openstack-rhel9@sha256:d6d34b4b086b9f64615932eddca9d811e1f1fcd9fc431be2bfd6cf5ef1dcb1c0_s390x, registry.redhat.io/openshift4/ose-machine-api-provider-openstack-rhel9@sha256:d6d34b4b086b9f64615932eddca9d811e1f1fcd9fc431be2bfd6cf5ef1dcb1c0_s390x, registry.redhat.io/openshift4/ose-machine-api-provider-openstack-rhel9@sha256:d6d34b4b086b9f64615932eddca9d811e1f1fcd9fc431be2bfd6cf5ef1dcb1c0_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:4e16a151c9d93ba62264436ea9431198744bc29f49fb7a882da06da4d938aa8f_ppc64le as a component of Red Hat OpenShift Container Platform 4.21 | registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:4e16a151c9d93ba62264436ea9431198744bc29f49fb7a882da06da4d938aa8f_ppc64le, registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:4e16a151c9d93ba62264436ea9431198744bc29f49fb7a882da06da4d938aa8f_ppc64le, * |
| Red Hat | registry.redhat.io/openshift4/ose-tools-rhel9@sha256:e86ec53535815e9a33310612c4743b9a39010abb719dad3aadb6cd7e7723863d_arm64 as a component of Red Hat OpenShift Container Platform 4.21 | registry.redhat.io/openshift4/ose-tools-rhel9@sha256:e86ec53535815e9a33310612c4743b9a39010abb719dad3aadb6cd7e7723863d_arm64, *, registry.redhat.io/openshift4/ose-tools-rhel9@sha256:e86ec53535815e9a33310612c4743b9a39010abb719dad3aadb6cd7e7723863d_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:7b6d8d3f8dcc746fe73c92e5517a80015c0a2b998c9202102b094329240b6ecb_ppc64le as a component of Red Hat OpenShift Container Platform 4.21 | registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:7b6d8d3f8dcc746fe73c92e5517a80015c0a2b998c9202102b094329240b6ecb_ppc64le, registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:7b6d8d3f8dcc746fe73c92e5517a80015c0a2b998c9202102b094329240b6ecb_ppc64le, * |
| Red Hat | registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:b5c3cbc4b1637c28506d5ccc3148982c86e7bc4f0766392aba51717eaca00840_ppc64le as a component of Red Hat OpenShift Container Platform 4.21 | registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:b5c3cbc4b1637c28506d5ccc3148982c86e7bc4f0766392aba51717eaca00840_ppc64le, *, registry.redhat.io/openshift4/ose-installer-artifacts-rhel9@sha256:b5c3cbc4b1637c28506d5ccc3148982c86e7bc4f0766392aba51717eaca00840_ppc64le |
| Red Hat | registry.redhat.io/openshift4/network-tools-rhel9@sha256:1fc273414780a92a504e697cae92eff4e03ceb52e25fc3b801b4b315b51d0167_arm64 as a component of Red Hat OpenShift Container Platform 4.21 | registry.redhat.io/openshift4/network-tools-rhel9@sha256:1fc273414780a92a504e697cae92eff4e03ceb52e25fc3b801b4b315b51d0167_arm64, registry.redhat.io/openshift4/network-tools-rhel9@sha256:1fc273414780a92a504e697cae92eff4e03ceb52e25fc3b801b4b315b51d0167_arm64, * |
| Red Hat | registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:47db33ed82f43a65db4012557d630a9fc5b30baac89726cf0797dab75b146d10_arm64 as a component of Red Hat OpenShift Container Platform 4.21 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:5cd5d596f68c447c64de135bc2174a41def873ae21499b9bef609a8ba70296fc_ppc64le as a component of Red Hat OpenShift Container Platform 4.21 | registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:5cd5d596f68c447c64de135bc2174a41def873ae21499b9bef609a8ba70296fc_ppc64le, registry.redhat.io/openshift4/ose-machine-os-images-rhel9@sha256:5cd5d596f68c447c64de135bc2174a41def873ae21499b9bef609a8ba70296fc_ppc64le, * |
| Red Hat | registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9@sha256:5838caa8e2b57dae013e16badc26b539a1dfa5f0b9cfaeaa99447bd9db2b9971_s390x as a component of Red Hat OpenShift Container Platform 4.21 | registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9@sha256:5838caa8e2b57dae013e16badc26b539a1dfa5f0b9cfaeaa99447bd9db2b9971_s390x, registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9@sha256:5838caa8e2b57dae013e16badc26b539a1dfa5f0b9cfaeaa99447bd9db2b9971_s390x, * |
…and 67 more
Timeline
- Feb 24, 2026 CVE Published
- May 5, 2026 Distribution Patch
- May 5, 2026 Distribution Patch
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- Jul 18, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2026:2984 advisory
- https://access.redhat.com/security/cve/CVE-2025-13465 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2984.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2431740 issue
- https://www.cve.org/CVERecord?id=CVE-2025-13465 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-13465 advisory
- https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg advisory