VDB
RHSA-2026:60023
RHSA-2026:60023
PUBLISHED
CVSS 7.400000095367432 HIGH
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
Risk Scores
CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-csi-livenessprobe-rhel9@sha256:8b6cb8e93205499ff922c0b6c7466e30380b125bbcafcc7d56e0bf8c8e25947a_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:c39044bb2ae0fa41581672a464e9ada1f2809759fa2ad6f8d73bd1754de23608_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-cni-rhel9@sha256:3bb7929711eee35a6d760250f9bc3b7b15f7ef428f17ac0030e53b980b14836a_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-networkpolicy-rhel9@sha256:45240f8c81cbe2aa219e98c8fc84a5c2b670c56f9e0042d3c35e61065001aa00_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:573971c8d3597097cf6b7530ac63f3f3dabe668331eb4c949ddfa77c8731fd6a_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:f6b1b6099560a54bc8d36c05fa1fd5478353d1c7fc0902189e97ddcee02a70b6_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-libvirt-machine-controllers-rhel9@sha256:d83b364666b837cc702d5b0fc20a1d28048ba8c061162797c818532fcc73a07c_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:5d6541b65b2cf824d85228bb0c1b62e6af255bd97c3867e41a2cf50a0434c643_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:106e3e3f6bd1ac49cb13748b54e8c38284cf16c1b3da95d769e6494e5b6a351d_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-external-snapshotter-rhel9@sha256:8b5c342fc9eecb5a065ddba5c73d2f2bfb5932da1db555de5c1573b90ba0f7e2_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-vsphere-csi-driver-rhel9@sha256:fcbaf747a779dfde1c76911167f8eb09c65274b14eb7e2dc5882eba583f25bad_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cli-rhel9@sha256:07665c43d9ae56cb387c448b2d4230ceb68a6e104bd9a3ec1da20b924ec63d11_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-driver-shared-resource-rhel9-operator@sha256:88d8b945fe7c2c2f57bdfc659fff5bb1e45482568790ad54ef7a22e40a3140f3_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-console-rhel9@sha256:ae7c62ea3c721e15d29e36a7d818281364d78545a76d5678602eb25d91b91275_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator@sha256:10b20456ff2311015c744957f9e7c7541c62790f07924478d22e90a7d16f2fd1_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-openshift-controller-manager-rhel9@sha256:bb1968fe103323abbfd987a127047a4885b49e4c4464eee0dd48fb06f74e40c5_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-update-keys-rhel9@sha256:8c71d439b034077d2eef42b37679efeaec4cb38ae8aaeda825524cdee58a8119_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-baremetal-runtimecfg-rhel9@sha256:473b2d90e70ed116458d13239e2c663bfccc0962874ca6a09a400716e6daa062_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus-rhel9-operator@sha256:dc680ae599b78a169871b1b167b5012827d1ca11a5add418c62aa8974d18d03c_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-network-metrics-daemon-rhel9@sha256:e63fecac91435767427ca995ff88c1a35b61362777b4698a9d8afdefea58d148_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
…and 639 more
Timeline
- Sep 3, 2026 CVE Published
- Oct 14, 2026 CVE Updated
- Oct 14, 2026 Distribution Patch
- Oct 14, 2026 Distribution Patch
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
References
- https://github.com/advisories/GHSA-35jh-r3h4-6jhm advisory
- https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c advisory
- https://access.redhat.com/errata/RHSA-2026:60023 advisory
- https://access.redhat.com/security/cve/CVE-2026-25681 advisory
- https://access.redhat.com/security/cve/CVE-2026-33814 advisory
- https://access.redhat.com/security/cve/CVE-2026-34986 advisory
- https://access.redhat.com/security/cve/CVE-2026-35469 advisory
- https://access.redhat.com/security/cve/CVE-2026-39820 advisory
- https://access.redhat.com/security/cve/CVE-2026-42499 advisory
- https://access.redhat.com/security/cve/CVE-2026-42504 advisory
- https://access.redhat.com/security/cve/CVE-2026-46597 advisory
- https://access.redhat.com/security/cve/CVE-2026-4800 advisory
- https://access.redhat.com/security/cve/CVE-2026-49332 advisory
- https://access.redhat.com/security/cve/CVE-2026-50236 advisory
- https://access.redhat.com/security/cve/CVE-2026-50237 advisory
- https://access.redhat.com/security/cve/CVE-2026-9277 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60023.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2453496 issue
- https://www.cve.org/CVERecord?id=CVE-2026-4800 advisory
…and 68 more