VDB
RHSA-2026:54188
RHSA-2026:54188
PUBLISHED
CVSS 7.400000095367432 HIGH
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
Risk Scores
CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-ironic-static-ip-manager-rhel9@sha256:a459aaa27cd44e6bd1563ca7dca00e1b68a3ca84ba1b3b6e35b63db8ec607c2e_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-keepalived-ipfailover@sha256:a2eb9d164f2240dd1e9abed9c92b7c33888196d07a71a8dc6ebd0232b0ba5b05_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-os-images-rhel8@sha256:78a7412be954100c3a4a6c4a78fbe7e77beb7cd3f94213a48508261d2a6004a6_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel8@sha256:6e57c8205781e2833abea06fa66cbe8bfa979b8e9bf3ef4a72d46d2e6a478f79_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cloud-credential-operator@sha256:12bc2c3857ea67e79e744d48d2b46e998f245b1adb52f6b9a2034e61f0840135_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-oauth-proxy@sha256:50c197af692a7af2093a1fde0248a5fa0f5ac5c782da891dfa4dbc6149b0659e_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8@sha256:e3c0e3b83dff0cb03c98e36c3ac21dad0cab582c439d8616b9659418e2483d0d_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-openshift-apiserver-operator@sha256:0c00e05886bb8ce10e3a071d343e62c79780695553219bf400aaa9c8c50a475d_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-api-provider-gcp-rhel8@sha256:3d04f7b04377e50a4170d4920731c44a34b41f6a3b0ae210fdf94e8fe4aeba6c_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-baremetal-operator-rhel8@sha256:af9c7b2f499fa40f0cdf3d238c43bc67f0c68e57f27f2167ac34d43a459f9743_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:23bc13f2ebc0e5883604c7f51d78b0ca71551b846ada2a6fbb552c166065191b_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-powervs-block-csi-driver-rhel8@sha256:f30cbea885dc61c169ce072d4a6dfb2de0f07b90fdf30f37fea74b862686c5ab_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-baremetal-installer-rhel8@sha256:ea97e2ca86bb681e562747e678f454003c82a125384ed8a8ec680f4fe9531821_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:5a1ba6457340c06f34ed3af38fef999c43b7e410d2c62e305cd75209b18f4eec_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-hyperkube@sha256:2154d9e233a547e0bed69545950fca51b36e680fd184621632b745271438dec4_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-image-customization-controller-rhel8@sha256:2fc32f7ba677c3bf2bdcbcee64140743eeeb2bf0b57993c93518a29bc7c87776_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-route-override-cni-rhel8@sha256:8cca5b0c9a1f90481abe7da7fcb609d87b1154964e92144a4b6329a63bbf4636_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-external-attacher-rhel8@sha256:7eb03bbcbf1a3c9c943a88ec5ff65eafe0333246b21c8f5bcb21ea2ac4c0fd2d_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-network-metrics-daemon-rhel8@sha256:1ef7da305b3deb7eebcdd4c1ca84efe204811c4a99f77980c1b58ae2d3632116_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-docker-builder@sha256:fbaa6700b5667e7f4a298ba72cf3a322c985a577878b9250a7d6a2fed988ce07_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
…and 171 more
Timeline
- Aug 20, 2026 CVE Published
- Oct 14, 2026 CVE Updated
- Oct 14, 2026 Distribution Patch
- Oct 14, 2026 Distribution Patch
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
References
- https://github.com/advisories/GHSA-35jh-r3h4-6jhm advisory
- https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c advisory
- https://access.redhat.com/errata/RHSA-2026:54188 advisory
- https://access.redhat.com/security/cve/CVE-2026-44486 advisory
- https://access.redhat.com/security/cve/CVE-2026-44487 advisory
- https://access.redhat.com/security/cve/CVE-2026-44488 advisory
- https://access.redhat.com/security/cve/CVE-2026-44492 advisory
- https://access.redhat.com/security/cve/CVE-2026-44494 advisory
- https://access.redhat.com/security/cve/CVE-2026-44495 advisory
- https://access.redhat.com/security/cve/CVE-2026-4800 advisory
- https://access.redhat.com/security/cve/CVE-2026-49332 advisory
- https://access.redhat.com/security/cve/CVE-2026-50237 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54188.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2453496 issue
- https://www.cve.org/CVERecord?id=CVE-2026-4800 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-4800 advisory
- https://cna.openjsf.org/security-advisories.html advisory
- https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2487947 issue
…and 29 more