VDB

RHSA-2026%3A4782

RHSA-2026%3A4782 PUBLISHED CVSS 8.199999809265137 HIGH

A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.

Risk Scores

CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected Products

VendorProductVersions
Red Hatregistry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e48c15182f306c70022f3b9e3adec595df8a92fc585be2a784d7c5996a4544e3_s390x as a component of Cluster Observability Operator 1.4.0registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e48c15182f306c70022f3b9e3adec595df8a92fc585be2a784d7c5996a4544e3_s390x, registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e48c15182f306c70022f3b9e3adec595df8a92fc585be2a784d7c5996a4544e3_s390x, *
Red Hatregistry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:8c64e80992798b9730a5962a99769050f09d4e447c6418d8d92dc6383269f59d_amd64 as a component of Cluster Observability Operator 1.4.0registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:8c64e80992798b9730a5962a99769050f09d4e447c6418d8d92dc6383269f59d_amd64, registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:8c64e80992798b9730a5962a99769050f09d4e447c6418d8d92dc6383269f59d_amd64, registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:8c64e80992798b9730a5962a99769050f09d4e447c6418d8d92dc6383269f59d_amd64
Red Hatregistry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:ebfff93129c868abca86e43dc866bb4239b4172fbbf5275636800ff8bffdd9e5_amd64 as a component of Cluster Observability Operator 1.4.0registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:ebfff93129c868abca86e43dc866bb4239b4172fbbf5275636800ff8bffdd9e5_amd64, registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:ebfff93129c868abca86e43dc866bb4239b4172fbbf5275636800ff8bffdd9e5_amd64, *
Red Hatregistry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:779134e66ba8f2cd9900bcdd189fc9f82d2c9139ea900ba35373cee6b6731777_arm64 as a component of Cluster Observability Operator 1.4.0*, *, registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:779134e66ba8f2cd9900bcdd189fc9f82d2c9139ea900ba35373cee6b6731777_arm64
Red Hatregistry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:c4936f949b9e9a8026f11818876904847025569f87dc111571c166883e5e51e7_s390x as a component of Cluster Observability Operator 1.4.0*, *, registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:c4936f949b9e9a8026f11818876904847025569f87dc111571c166883e5e51e7_s390x
Red Hatregistry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:d1534aa5874aa20328ffdac4a444c62fe4be8397aa01c5f0b092854937984a1e_amd64 as a component of Cluster Observability Operator 1.4.0*, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:d1534aa5874aa20328ffdac4a444c62fe4be8397aa01c5f0b092854937984a1e_amd64, *
Red Hatregistry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:94f162f605bce9f8f42cd526fa6cd32287c91e85192fc46d76e3682086498ba8_ppc64le as a component of Cluster Observability Operator 1.4.0registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:94f162f605bce9f8f42cd526fa6cd32287c91e85192fc46d76e3682086498ba8_ppc64le, *, registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:94f162f605bce9f8f42cd526fa6cd32287c91e85192fc46d76e3682086498ba8_ppc64le
Red Hatregistry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:c92cc6211a0dab55a8e0c47d6bc5d3917dd6c0f74f2bb5c1a277a213c2dfec52_s390x as a component of Cluster Observability Operator 1.4.0*, *, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:c92cc6211a0dab55a8e0c47d6bc5d3917dd6c0f74f2bb5c1a277a213c2dfec52_s390x
Red Hatregistry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5540d14195949d584af8428653ab86d9bc940655af3e6c52d28d315bfb88965f_arm64 as a component of Cluster Observability Operator 1.4.0*, registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5540d14195949d584af8428653ab86d9bc940655af3e6c52d28d315bfb88965f_arm64, *
Red Hatregistry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:fc37e161c5d23b535361b4055b13977da2ee4f514f01f2175ee15a147068154d_ppc64le as a component of Cluster Observability Operator 1.4.0*, registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:fc37e161c5d23b535361b4055b13977da2ee4f514f01f2175ee15a147068154d_ppc64le, *
Red Hatregistry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8f84e1a2f8ec059c6e441a57908a4cdcc76b75d46b7306392d350003aa1d2a37_s390x as a component of Cluster Observability Operator 1.4.0*, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8f84e1a2f8ec059c6e441a57908a4cdcc76b75d46b7306392d350003aa1d2a37_s390x, *
Red Hatregistry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:9753c985c308acd32fa38993b1b74ac85d1f6575db2684c6ab2a31d0fb66492e_ppc64le as a component of Cluster Observability Operator 1.4.0registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:9753c985c308acd32fa38993b1b74ac85d1f6575db2684c6ab2a31d0fb66492e_ppc64le, *, registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:9753c985c308acd32fa38993b1b74ac85d1f6575db2684c6ab2a31d0fb66492e_ppc64le
Red Hatregistry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:7b2d1452802be2d5adb9190e06cc17fd38986bfead5abfa4dfbaf46d45a79e61_amd64 as a component of Cluster Observability Operator 1.4.0registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:7b2d1452802be2d5adb9190e06cc17fd38986bfead5abfa4dfbaf46d45a79e61_amd64, *, *
Red Hatregistry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fc56261b4200d2a06eb9a0c646e1d0888fe81ab1e9bc987cfc8c040f928c32f0_s390x as a component of Cluster Observability Operator 1.4.0registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fc56261b4200d2a06eb9a0c646e1d0888fe81ab1e9bc987cfc8c040f928c32f0_s390x, *, *
Red Hatregistry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:51e119a5292bcbe24be468605b45f52517e44606a147551d6d165676a9a4a6aa_amd64 as a component of Cluster Observability Operator 1.4.0*, registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:51e119a5292bcbe24be468605b45f52517e44606a147551d6d165676a9a4a6aa_amd64, registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:51e119a5292bcbe24be468605b45f52517e44606a147551d6d165676a9a4a6aa_amd64
Red Hatregistry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:8fdf6e264e51d37bfb868a50561c6addd542ad6b22ed7210a9d26f9ddb1c063b_s390x as a component of Cluster Observability Operator 1.4.0registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:8fdf6e264e51d37bfb868a50561c6addd542ad6b22ed7210a9d26f9ddb1c063b_s390x, registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:8fdf6e264e51d37bfb868a50561c6addd542ad6b22ed7210a9d26f9ddb1c063b_s390x, registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:8fdf6e264e51d37bfb868a50561c6addd542ad6b22ed7210a9d26f9ddb1c063b_s390x
Red Hatregistry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:778df37dd74dd32dd6aaad6e1a6394dfc3b6776750d346d716f0c28a016c4b7f_arm64 as a component of Cluster Observability Operator 1.4.0registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:778df37dd74dd32dd6aaad6e1a6394dfc3b6776750d346d716f0c28a016c4b7f_arm64, *, *
Red Hatregistry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:56e8d9fc3e6217dd05cbefdd890fd5faf962e2b2285e53d03bce75b9ec9aab72_amd64 as a component of Cluster Observability Operator 1.4.0registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:56e8d9fc3e6217dd05cbefdd890fd5faf962e2b2285e53d03bce75b9ec9aab72_amd64, *, *
Red Hatregistry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:83ed0a6636120054aaa3585f081464aeaa01cec3cb004fc272501692065c2a1d_s390x as a component of Cluster Observability Operator 1.4.0registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:83ed0a6636120054aaa3585f081464aeaa01cec3cb004fc272501692065c2a1d_s390x, registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:83ed0a6636120054aaa3585f081464aeaa01cec3cb004fc272501692065c2a1d_s390x, *

…and 63 more

Timeline

  • Mar 17, 2026 CVE Published
  • May 5, 2026 Distribution Patch
  • May 5, 2026 Distribution Patch
  • May 5, 2026 Security Advisory
  • May 5, 2026 Security Advisory
  • Jul 18, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›