VDB
RHSA-2026%3A3422
RHSA-2026%3A3422
PUBLISHED
CVSS 8.199999809265137 HIGH
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-powervs-block-csi-driver-operator-rhel8@sha256:fe3490acd214124cc3b16f12aee750b51c31b82dec27677d5f1f1d6006384486_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-powervs-block-csi-driver-operator-rhel8@sha256:fe3490acd214124cc3b16f12aee750b51c31b82dec27677d5f1f1d6006384486_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:9aecbcf45141fa7050adfb9a74f9b76d5087cca447ca9c9a195b10999342b175_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:9aecbcf45141fa7050adfb9a74f9b76d5087cca447ca9c9a195b10999342b175_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-ibm-vpc-node-label-updater-rhel8@sha256:7b59483fbd35a183ee68d7c02977b7c9bb141588958f5e8a1317f656aabe653d_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-ibm-vpc-node-label-updater-rhel8@sha256:7b59483fbd35a183ee68d7c02977b7c9bb141588958f5e8a1317f656aabe653d_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus-alertmanager@sha256:86dd87674a5a7361f94381bb5fe49206b1cc05adfd91856f461793159db0d6aa_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-prometheus-alertmanager@sha256:86dd87674a5a7361f94381bb5fe49206b1cc05adfd91856f461793159db0d6aa_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-bootstrap@sha256:bb634e360d469fe796f71e7de263a0050bbdc417cee6f0e186769b46eb426cd3_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-cluster-bootstrap@sha256:bb634e360d469fe796f71e7de263a0050bbdc417cee6f0e186769b46eb426cd3_amd64, *, registry.redhat.io/openshift4/ose-cluster-bootstrap@sha256:bb634e360d469fe796f71e7de263a0050bbdc417cee6f0e186769b46eb426cd3_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-configmap-reloader@sha256:28e6fd88f30674c2c073943d72c602eef34a1c88c31939f75f5b2e5d67911eca_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-configmap-reloader@sha256:28e6fd88f30674c2c073943d72c602eef34a1c88c31939f75f5b2e5d67911eca_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:d163535a1b6fa970c89520be9563634fdabb1aa1d34d36d0ae05f10ce863b776_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:3be2ba30a85e8d823db37135df5ea0172b1df5841bb2d5dd254dc1e2788e5744_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:3be2ba30a85e8d823db37135df5ea0172b1df5841bb2d5dd254dc1e2788e5744_amd64, registry.redhat.io/openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:3be2ba30a85e8d823db37135df5ea0172b1df5841bb2d5dd254dc1e2788e5744_amd64, registry.redhat.io/openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:3be2ba30a85e8d823db37135df5ea0172b1df5841bb2d5dd254dc1e2788e5744_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-ibmcloud-cluster-api-controllers-rhel8@sha256:b1d43cb29f5d567d3a506678dbdcdaf280d38f2e591140e8958fcc4847758193_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-ibmcloud-cluster-api-controllers-rhel8@sha256:b1d43cb29f5d567d3a506678dbdcdaf280d38f2e591140e8958fcc4847758193_amd64, registry.redhat.io/openshift4/ose-ibmcloud-cluster-api-controllers-rhel8@sha256:b1d43cb29f5d567d3a506678dbdcdaf280d38f2e591140e8958fcc4847758193_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-samples-operator@sha256:c377d9990c8b220ab1566350e16348a4c3e8f0efc490e3cf9b9e63a5002f0473_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-cluster-samples-operator@sha256:c377d9990c8b220ab1566350e16348a4c3e8f0efc490e3cf9b9e63a5002f0473_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:28deefb17c63506eca2dd7dd26e734540755ba68b6cece21ac36e74c876cdd01_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:28deefb17c63506eca2dd7dd26e734540755ba68b6cece21ac36e74c876cdd01_amd64, registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:28deefb17c63506eca2dd7dd26e734540755ba68b6cece21ac36e74c876cdd01_amd64, registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:28deefb17c63506eca2dd7dd26e734540755ba68b6cece21ac36e74c876cdd01_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:0e7793d19afe307a7fa2754e16c267f410c2d5362139685bb2e4148df9ab30cb_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:0e7793d19afe307a7fa2754e16c267f410c2d5362139685bb2e4148df9ab30cb_amd64, registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:0e7793d19afe307a7fa2754e16c267f410c2d5362139685bb2e4148df9ab30cb_amd64, * |
| Red Hat | registry.redhat.io/openshift4/network-tools-rhel8@sha256:f4e785f3669d3fb96edbaa7adfa3cb521cdeb7ed5d7993ce9e1f4a9721bc0737_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/network-tools-rhel8@sha256:f4e785f3669d3fb96edbaa7adfa3cb521cdeb7ed5d7993ce9e1f4a9721bc0737_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel8@sha256:ac9b992d63959fcb84403808e0ca8be5afa5f1394f5f7b7e33e9f4f5b0c027bb_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel8@sha256:ac9b992d63959fcb84403808e0ca8be5afa5f1394f5f7b7e33e9f4f5b0c027bb_amd64, *, registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel8@sha256:ac9b992d63959fcb84403808e0ca8be5afa5f1394f5f7b7e33e9f4f5b0c027bb_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-configmap-reloader@sha256:28e6fd88f30674c2c073943d72c602eef34a1c88c31939f75f5b2e5d67911eca_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, registry.redhat.io/openshift4/ose-configmap-reloader@sha256:28e6fd88f30674c2c073943d72c602eef34a1c88c31939f75f5b2e5d67911eca_amd64, registry.redhat.io/openshift4/ose-configmap-reloader@sha256:28e6fd88f30674c2c073943d72c602eef34a1c88c31939f75f5b2e5d67911eca_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8@sha256:083584adcc1c6a9cfc44fd121f6b5a80caf847d6ef41457243d68e832512e137_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8@sha256:083584adcc1c6a9cfc44fd121f6b5a80caf847d6ef41457243d68e832512e137_amd64, registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8@sha256:083584adcc1c6a9cfc44fd121f6b5a80caf847d6ef41457243d68e832512e137_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-operator-lifecycle-manager@sha256:929167beb3e1cefead0ef3386b7e0e08d8ac11829ae93ae9c71424fecdad5429_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-operator-lifecycle-manager@sha256:929167beb3e1cefead0ef3386b7e0e08d8ac11829ae93ae9c71424fecdad5429_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-keepalived-ipfailover@sha256:b656ad76cf4e4555f1a9c2681350c09d61903dab479810c093ee28a7f8084cf7_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, registry.redhat.io/openshift4/ose-keepalived-ipfailover@sha256:b656ad76cf4e4555f1a9c2681350c09d61903dab479810c093ee28a7f8084cf7_amd64, registry.redhat.io/openshift4/ose-keepalived-ipfailover@sha256:b656ad76cf4e4555f1a9c2681350c09d61903dab479810c093ee28a7f8084cf7_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cloud-credential-operator@sha256:9b1ae658b537e817a7bb0ad9a0af7adc94bd438769dd422917d8d9d562168798_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus-operator-admission-webhook-rhel8@sha256:42c87f1a20074c0e2d0f15cd519f9da60e3faa7c487027fd47eb978442d02044_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-prometheus-operator-admission-webhook-rhel8@sha256:42c87f1a20074c0e2d0f15cd519f9da60e3faa7c487027fd47eb978442d02044_amd64 |
…and 364 more
Timeline
- Mar 5, 2026 CVE Published
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Security Advisory
- Apr 29, 2026 Security Advisory
- Apr 29, 2026 Security Advisory
- Apr 29, 2026 Security Advisory
- Jul 18, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2026:3422 advisory
- https://access.redhat.com/security/cve/CVE-2025-13465 advisory
- https://access.redhat.com/security/cve/CVE-2025-58068 advisory
- https://access.redhat.com/security/cve/CVE-2025-65637 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3422.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2431740 issue
- https://www.cve.org/CVERecord?id=CVE-2025-13465 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-13465 advisory
- https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2391958 issue
- https://www.cve.org/CVERecord?id=CVE-2025-58068 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-58068 advisory
- https://github.com/eventlet/eventlet/commit/0bfebd1117d392559e25b4bfbfcc941754de88fb advisory
- https://github.com/eventlet/eventlet/pull/1062 advisory
- https://github.com/eventlet/eventlet/security/advisories/GHSA-hw6f-rjfj-j7j7 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2418900 issue
- https://www.cve.org/CVERecord?id=CVE-2025-65637 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-65637 advisory
- https://github.com/mjuanxd/logrus-dos-poc exploit
…and 7 more