Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-13465

29
FAUCET Score

CVE-2025-13465 is a prototype pollution vulnerability affecting Lodash versions 4.0.0 through 4.17.22, specifically within the _.unset and _.omit functions. Attackers can craft malicious paths to delete methods from global prototypes, though overwriting original behavior is not possible. This vulnerability has a CVSS score of 5.3 (MEDIUM) with a network attack vector and low impact on integrity, requiring no privileges or user interaction. There is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, but it has garnered significant community discussion with 11 mentions.

Impacted Technologies

VendorProductVersion(s)CPE
>= 4.0.0, < 4.17.23CPE matchmatch criteria
cpe:2.3:a:lodash:lodash:*:*:*:*:*:node.js:*:*

CVSS Data

CVSS version used by this source: 4.0

6.9MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
VS Confidentiality
NONE
VS Integrity
LOW
VS Availability
LOW
SS Confidentiality
HIGH
SS Integrity
HIGH
SS Availability
HIGH
Exploit Maturity
PROOF_OF_CONCEPT
CvssVersion
4.0

Exploit Intelligence

EPSS Score
1.54%
Probability of exploitation in next 30 days
EPSS Percentile
72.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0154 is in the 55th percentile among its peer group of 23,705 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (204)

npmpatch availablevia ghsa
Product: lodashFixed in: 4.17.23
npmpatch availablevia ghsa
Product: lodash-esFixed in: 4.17.23
npmpatch availablevia ghsa
Product: lodash-amdFixed in: 4.17.23
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: pcs-0:0.12.1-1.el10_1.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 10.0 Extended Update SupportFixed in: pcs-0:0.12.0-3.el10_0.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: pcs-0:0.10.8-1.el8_4.10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnFixed in: pcs-0:0.10.8-1.el8_4.10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: pcs-0:0.10.12-6.el8_6.12
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: pcs-0:0.10.12-6.el8_6.12
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: pcs-0:0.10.15-4.el8_8.10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: pcs-0:0.11.10-1.el9_7.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: pcs-0:0.11.1-10.el9_0.10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: pcs-0:0.11.4-7.el9_2.7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: pcs-0:0.11.7-2.el9_4.6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.6 Extended Update SupportFixed in: pcs-0:0.11.9-2.el9_6.3
View patch
redhatpatch availablevia redhat_api
Product: Network Observability (NETOBSERV) 1.11.0Fixed in: network-observability/network-observability-console-plugin-compat-rhel9:sha256:325db5ee476d5467e24748b6a66def44ff06e91e7e0665f43a49d7df9dbc9870
View patch
redhatpatch availablevia redhat_api
Product: Network Observability (NETOBSERV) 1.11.0Fixed in: network-observability/network-observability-console-plugin-rhel9:sha256:77695f611b1122150c84ee648c674037c488007684d8644a5fc420e111e447b1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Developer Hub 1.8Fixed in: rhdh/rhdh-hub-rhel9:sha256:114b288483eccad70b18159c9f75de9c061bdf9ee269198a75c3efeb68a43a2b
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Discovery 2Fixed in: discovery/discovery-ui-rhel9:sha256:2ff9787699ff67dab7ee6f300d84651233f499aac8aeee10bfe21381806393c4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.16Fixed in: openshift4/ose-console-rhel9:sha256:10439ed7506bb140f1977a564caacc309002a67a41c61539c2ee150873f23b69
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.17Fixed in: openshift4/ose-console-rhel9:sha256:386efda49ab6426feae521e6f91a39f70f145f679f4d3a7a739cbfa2d533382a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.18Fixed in: openshift4/ose-console-rhel9:sha256:6a7462a57f3b25a5fc080fbe5daa50e2a5ee09b80b1f3015abc184ee079fd550
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.19Fixed in: openshift4/ose-console-rhel9:sha256:8c25c7d027cb572010be5ef7a14a2d6b7320409c76864468078f996f8457c27a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.2Fixed in: openshift4/ose-console-rhel9:sha256:5baa52d4b2bf0bf30a7984ee5a656fd6c128cff3302c53780b3b389371cf5c06
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.21Fixed in: openshift4/ose-monitoring-plugin-rhel9:sha256:b0f7fd94fa47603540b7c49967aa1921d5c1c063576f6ecee524a52400bd1089
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 2.6Fixed in: openshift-service-mesh/kiali-ossmc-rhel8:sha256:ee28a1278a21783acbda367a8f10d51dd81a7f4af5dcba64c1d58402bac0b43d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 2.6Fixed in: openshift-service-mesh/kiali-rhel8:sha256:ad1449f9047107c23d5b0e53c3ca148a12a9729dd7aa474c5eadb55870f314fa
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3Fixed in: openshift-service-mesh/kiali-ossmc-rhel9:sha256:19c44dfb277123122abafc25552fe408ea7ad6dc026aa592f53e3a754ca0a44f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3Fixed in: openshift-service-mesh/kiali-rhel9:sha256:527fd434b3b1f9b9304adbedd89a593ca347a84571a68c7935afe6aa207db49f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.1Fixed in: openshift-service-mesh/kiali-ossmc-rhel9:sha256:e5a71ca768b96c827dd2fd860cbd739d7743f1eeb89b2e4c7cc9157941683626
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.1Fixed in: openshift-service-mesh/kiali-rhel9:sha256:a60d01bfe3bfa2dc484f9d940b71538f0b3732cb77db883edb7a93cf42f2992e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.2Fixed in: openshift-service-mesh/kiali-ossmc-rhel9:sha256:d2d862c021ddcd974a12d63ea6c270e2de651201182c16baa3e24f7ce8985daf
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.2Fixed in: openshift-service-mesh/kiali-rhel9:sha256:d9c852cf7f5f21374f8ae2e31692fa30090dbe13fa66b3a608fc07d0a5e8ae2c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.2Fixed in: rhtas/rekor-search-ui-rhel9:sha256:1e3a46ade52215e2c78df9229f36301c94099e8397ee74ab99fb8bd504ce7aa2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.3Fixed in: rhtas/rhtas-console-ui-rhel9:sha256:e7ee88dd498d337304db3d90f4f352e55114475dbc9d75c3b18a49a249492b1e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceFixed in: pcs-0:0.10.15-4.el8_8.10
View patch
redhatpatch availablevia redhat_api
Product: Cryostat 4 on RHEL 9Fixed in: cryostat/cryostat-openshift-console-plugin-rhel9:4.1.0-17
View patch
redhatpatch availablevia redhat_api
Product: Cryostat 4 on RHEL 9Fixed in: cryostat/cryostat-rhel9:4.1.0-17
View patch
ubuntupatch availablevia ubuntu_usn
Product: node-lodash (focal)Fixed in: 4.17.15+dfsg-2ubuntu0.1~esm1
ubuntupatch availablevia ubuntu_usn
Product: node-lodash (bionic)Fixed in: 4.17.4+dfsg-1ubuntu0.1~esm1
ubuntupatch availablevia ubuntu_usn
Product: node-lodash (xenial)Fixed in: 2.4.1+dfsg-3ubuntu0.1~esm1
ubuntupatch availablevia ubuntu_usn
Product: node-lodash (resolute)Fixed in: 4.17.23+dfsg-1ubuntu0.1~esm1
ubuntupatch availablevia ubuntu_usn
Product: node-lodash (questing)Fixed in: 4.17.21+dfsg+~cs8.31.198.20210220-9ubuntu0.25.10.1
ubuntupatch availablevia ubuntu_usn
Product: node-lodash (noble)Fixed in: 4.17.21+dfsg+~cs8.31.198.20210220-9ubuntu0.24.04.1~esm1
ubuntupatch availablevia ubuntu_usn
Product: node-lodash (jammy)Fixed in: 4.17.21+dfsg+~cs8.31.198.20210220-5ubuntu0.1~esm1
github_advisoryvendor investigatingvia nvd_reference
View patch
redhatno patchvia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-rhel9
redhatno patchvia redhat_api
Product: Confidential Compute AttestationFixed in: openshift-sandboxed-containers/osc-pccs
redhatno patchvia redhat_api
Product: Migration Toolkit for Applications 8Fixed in: mta/mta-ui-rhel9
redhatno patchvia redhat_api
Product: Migration Toolkit for ContainersFixed in: rhmtc/openshift-migration-ui-rhel8
redhatno patchvia redhat_api
Product: Migration Toolkit for VirtualizationFixed in: migration-toolkit-virtualization/mtv-console-plugin-rhel9
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/console-mce-rhel9
redhatno patchvia redhat_api
Product: Node HealthCheck OperatorFixed in: workload-availability/node-remediation-console-rhel8
redhatno patchvia redhat_api
Product: Node HealthCheck OperatorFixed in: workload-availability/node-remediation-console-rhel9
redhatno patchvia redhat_api
Product: OpenShift LightspeedFixed in: openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9
redhatno patchvia redhat_api
Product: OpenShift LightspeedFixed in: openshift-lightspeed/lightspeed-console-plugin-rhel9
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-console-plugin-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-console-plugin-rhel9
redhatno patchvia redhat_api
Product: Red Hat Ceph Storage 8Fixed in: ceph
redhatno patchvia redhat_api
Product: Red Hat Connectivity Link 1Fixed in: rhcl-1/rhcl-console-plugin-rhel9
redhatno patchvia redhat_api
Product: Red Hat Data Grid 8Fixed in: org.infinispan-infinispan-console
redhatno patchvia redhat_api
Product: Red Hat Edge Manager 1Fixed in: rhem/flightctl-ui-ocp-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager 1Fixed in: rhem/flightctl-ui-rhel9
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: ceph
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: cockpit
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: cockpit-files
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: cockpit-image-builder
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: cockpit-machines
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: cockpit-podman
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: linux-sgx
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: subscription-manager-cockpit
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: cockpit-appstream
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: pcs
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ceph
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: cockpit
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: cockpit-files
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: cockpit-machines
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: cockpit-podman
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: linux-sgx
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: subscription-manager-cockpit
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI) 3Fixed in: rhelai3/bootc-cuda-rhel9
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI) 3Fixed in: rhelai3/disk-image-cuda-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-dashboard-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-dashboard-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-mod-arch-gen-ai-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-mod-arch-model-registry-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/nmstate-console-plugin-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-agent-installer-ui-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-console
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-monitoring-plugin-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-networking-console-plugin-rhel9
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/mcg-core-rhel9
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/ocs-client-console-rhel9
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/odf-console-rhel9
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/odf-multicluster-console-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/code-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/dashboard-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/openvsx-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift distributed tracing 3Fixed in: rhosdt/tempo-jaeger-query-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argocd-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argocd-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/console-plugin-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/kubevirt-console-plugin
redhatno patchvia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/kubevirt-console-plugin-rhel9
redhatno patchvia redhat_api
Product: Red Hat Process Automation 7Fixed in: org.kie-process-migration-service
redhatno patchvia redhat_api
Product: Red Hat Satellite 6Fixed in: nodejs-babel-plugin-transform-class-properties
redhatno patchvia redhat_api
Product: Red Hat Satellite 6Fixed in: nodejs-babel-preset-env
redhatno patchvia redhat_api
Product: Red Hat Satellite 6Fixed in: nodejs-babel-preset-react
redhatno patchvia redhat_api
Product: Red Hat Satellite 6Fixed in: nodejs-formik
redhatno patchvia redhat_api
Product: Red Hat Satellite 6Fixed in: nodejs-openshift-dynamic-plugin-sdk
redhatno patchvia redhat_api
Product: Red Hat Satellite 6Fixed in: nodejs-patternfly-react
redhatno patchvia redhat_api
Product: Red Hat Satellite 6Fixed in: nodejs-patternfly-react-charts
redhatno patchvia redhat_api
Product: Red Hat Satellite 6Fixed in: nodejs-patternfly-react-extensions
redhatno patchvia redhat_api
Product: Red Hat Satellite 6Fixed in: nodejs-yup
redhatno patchvia redhat_api
Product: Red Hat Satellite 6Fixed in: satellite/iop-advisor-frontend-rhel9
redhatno patchvia redhat_api
Product: Red Hat Satellite 6Fixed in: satellite/iop-host-inventory-frontend-rhel9
redhatno patchvia redhat_api
Product: Red Hat Satellite 6Fixed in: satellite/iop-remediations-rhel9
redhatno patchvia redhat_api
Product: Red Hat Satellite 6Fixed in: satellite/iop-vulnerability-frontend-rhel9
redhatno patchvia redhat_api
Product: Red Hat Trusted Profile AnalyzerFixed in: rhtpa/rhtpa-trustification-service-rhel9
redhatno patchvia redhat_api
Product: streams for Apache Kafka 2Fixed in: com.github.streamshub-console
redhatno patchvia redhat_api
Product: streams for Apache Kafka 3Fixed in: com.github.streamshub-console
redhatno patchvia redhat_api
Product: Red Hat 3scale API Management Platform 2Fixed in: 3scale-amp2/system-rhel8
redhatno patchvia redhat_api
Product: Red Hat 3scale API Management Platform 2Fixed in: 3scale-amp2/system-rhel9
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-grafana-rhel9
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/console-rhel9
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/prometheus-rhel9
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/thanos-rhel9
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Security 4Fixed in: advanced-cluster-security/rhacs-main-rhel8
redhatno patchvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-25/lightspeed-rhel8
redhatno patchvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-26/gateway-rhel9
redhatno patchvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-26/lightspeed-rhel9
redhatno patchvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-tech-preview/automation-dashboard-rhel9
redhatno patchvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-on-clouds/aoc-azure-aap-installer-rhel9
redhatno patchvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: automation-platform-ui
redhatno patchvia redhat_api
Product: Red Hat build of Apache Camel - HawtIO 4Fixed in: io.hawt-project
redhatno patchvia redhat_api
Product: Red Hat build of Apicurio Registry 2Fixed in: io.apicurio-apicurio-registry
redhatno patchvia redhat_api
Product: Red Hat build of OptaPlanner 8Fixed in: org.optaweb.vehiclerouting-optaweb-vehicle-routing
redhatno patchvia redhat_api
Product: Red Hat Ceph Storage 4Fixed in: ceph
redhatno patchvia redhat_api
Product: Red Hat Ceph Storage 5Fixed in: ceph
redhatno patchvia redhat_api
Product: Red Hat Ceph Storage 6Fixed in: ceph
redhatno patchvia redhat_api
Product: Red Hat Ceph Storage 7Fixed in: ceph
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-api-rhel9
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-db-migration-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-db-migration-rhel9
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-ui-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-ui-rhel9
redhatend of lifevia redhat_api
Product: Red Hat 3scale API Management Platform 2Fixed in: 3scale-amp20/system
redhatend of lifevia redhat_api
Product: Red Hat 3scale API Management Platform 2Fixed in: 3scale-amp21/system
redhatend of lifevia redhat_api
Product: Red Hat 3scale API Management Platform 2Fixed in: 3scale-amp22/system
redhatend of lifevia redhat_api
Product: Red Hat 3scale API Management Platform 2Fixed in: 3scale-amp24/system
redhatend of lifevia redhat_api
Product: Red Hat 3scale API Management Platform 2Fixed in: 3scale-amp25/system
redhatend of lifevia redhat_api
Product: Red Hat 3scale API Management Platform 2Fixed in: 3scale-amp26/system
redhatend of lifevia redhat_api
Product: Red Hat 3scale API Management Platform 2Fixed in: 3scale-amp2/system-rhel7
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: grafana-pcp
redhatend of lifevia redhat_api
Product: Red Hat Fuse 7Fixed in: lodash-es
redhatend of lifevia redhat_api
Product: Migration Toolkit for VirtualizationFixed in: mtv-candidate/mtv-console-plugin-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: thunderbird
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: firefox
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-api-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: firefox
redhatend of lifevia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-24/lightspeed-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-25/aap-cloud-ui-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: grafana
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: grafana-pcp
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: mozjs60
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/vector-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: thunderbird
redhatend of lifevia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: automation-hub
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/logging-view-plugin-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: python3.11-galaxy-ng
redhatend of lifevia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: python3x-galaxy-ng
redhatend of lifevia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: python-galaxy-ng
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/log-file-metric-exporter-rhel9
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/fluentd-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Single Sign-On 7Fixed in: org.keycloak-keycloak-parent
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argo-rollouts-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: firefox
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: gjs
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: grafana
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: grafana-pcp
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/eventrouter-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/gitops-operator-bundle
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: thunderbird
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/cluster-logging-rhel9-operator
redhatend of lifevia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-alert-exporter-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-alertmanager-proxy-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-api-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-cli-artifacts-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-db-setup-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-periodic-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-telemetry-gateway-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-ui-ocp-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-ui-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-userinfo-proxy-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-worker-rhel9
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/cluster-logging-operator-bundle
redhatend of lifevia redhat_api
Product: Red Hat Fuse 7Fixed in: io.apicurio-apicurito
redhatend of lifevia redhat_api
Product: Red Hat Fuse 7Fixed in: io.hawt-hawtio-integration
redhatend of lifevia redhat_api
Product: Red Hat Fuse 7Fixed in: io.hawt-hawtio-online
redhatend of lifevia redhat_api
Product: Red Hat Fuse 7Fixed in: io.syndesis-syndesis-parent
redhatend of lifevia redhat_api
Product: Red Hat Fuse 7Fixed in: io.syndesis-syndesis-ui
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: firefox
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: gjs
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: grafana

Vendor Advisories (3)

ubuntuUSN-8411-1

Lodash vulnerabilities

Jun 9, 2026
npmGHSA-xxjr-mmjv-4gpgmedium

Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions

Jan 21, 2026
redhatCVE-2025-13465Important

lodash: prototype pollution in _.unset and _.omit functions

Jan 21, 2026

References

access.redhat.com / errata/RHSA-2026:11414
access.redhat.com / errata/RHSA-2026:13542
access.redhat.com / errata/RHSA-2026:13548
access.redhat.com / errata/RHSA-2026:13829
access.redhat.com / errata/RHSA-2026:14774
access.redhat.com / errata/RHSA-2026:14870
access.redhat.com / errata/RHSA-2026:14871
access.redhat.com / errata/RHSA-2026:15091
access.redhat.com / errata/RHSA-2026:17469
access.redhat.com / errata/RHSA-2026:1845
access.redhat.com / errata/RHSA-2026:18480
access.redhat.com / errata/RHSA-2026:18868
access.redhat.com / errata/RHSA-2026:19712
access.redhat.com / errata/RHSA-2026:20042
access.redhat.com / errata/RHSA-2026:20088
access.redhat.com / errata/RHSA-2026:2078
access.redhat.com / errata/RHSA-2026:2119
access.redhat.com / errata/RHSA-2026:2145
access.redhat.com / errata/RHSA-2026:2147
access.redhat.com / errata/RHSA-2026:2148
access.redhat.com / errata/RHSA-2026:2149
access.redhat.com / errata/RHSA-2026:21658
access.redhat.com / errata/RHSA-2026:24331
access.redhat.com / errata/RHSA-2026:2438
access.redhat.com / errata/RHSA-2026:2452
access.redhat.com / errata/RHSA-2026:2462
access.redhat.com / errata/RHSA-2026:2465
access.redhat.com / errata/RHSA-2026:2469
access.redhat.com / errata/RHSA-2026:2484
access.redhat.com / errata/RHSA-2026:25089
access.redhat.com / errata/RHSA-2026:2651
access.redhat.com / errata/RHSA-2026:2661
access.redhat.com / errata/RHSA-2026:2672
access.redhat.com / errata/RHSA-2026:2675
access.redhat.com / errata/RHSA-2026:2694
access.redhat.com / errata/RHSA-2026:2816
access.redhat.com / errata/RHSA-2026:2817
access.redhat.com / errata/RHSA-2026:2818
access.redhat.com / errata/RHSA-2026:2819
access.redhat.com / errata/RHSA-2026:2900
access.redhat.com / errata/RHSA-2026:2926
access.redhat.com / errata/RHSA-2026:2984
access.redhat.com / errata/RHSA-2026:2990
access.redhat.com / errata/RHSA-2026:3087
access.redhat.com / errata/RHSA-2026:33154
access.redhat.com / errata/RHSA-2026:33371
access.redhat.com / errata/RHSA-2026:34100
access.redhat.com / errata/RHSA-2026:3422
access.redhat.com / errata/RHSA-2026:34608
access.redhat.com / errata/RHSA-2026:36651
access.redhat.com / errata/RHSA-2026:36882
access.redhat.com / errata/RHSA-2026:3710
access.redhat.com / errata/RHSA-2026:3782
access.redhat.com / errata/RHSA-2026:3825
access.redhat.com / errata/RHSA-2026:3869
access.redhat.com / errata/RHSA-2026:3870
access.redhat.com / errata/RHSA-2026:3874
access.redhat.com / errata/RHSA-2026:3884
access.redhat.com / errata/RHSA-2026:3958
access.redhat.com / errata/RHSA-2026:3960
access.redhat.com / errata/RHSA-2026:3962
access.redhat.com / errata/RHSA-2026:40118
access.redhat.com / errata/RHSA-2026:40945
access.redhat.com / errata/RHSA-2026:40984
access.redhat.com / errata/RHSA-2026:41064
access.redhat.com / errata/RHSA-2026:41928
access.redhat.com / errata/RHSA-2026:41941
access.redhat.com / errata/RHSA-2026:41944
access.redhat.com / errata/RHSA-2026:4423
access.redhat.com / errata/RHSA-2026:4466
access.redhat.com / errata/RHSA-2026:4467
access.redhat.com / errata/RHSA-2026:4630
access.redhat.com / errata/RHSA-2026:4782
access.redhat.com / errata/RHSA-2026:5633
access.redhat.com / errata/RHSA-2026:5636
access.redhat.com / errata/RHSA-2026:6192
access.redhat.com / errata/RHSA-2026:6288
access.redhat.com / errata/RHSA-2026:6497
access.redhat.com / errata/RHSA-2026:6567
access.redhat.com / errata/RHSA-2026:8218
access.redhat.com / errata/RHSA-2026:8229
access.redhat.com / errata/RHSA-2026:9848
access.redhat.com / security/cve/CVE-2025-13465
bugzilla.redhat.com / show_bug.cgi
security.access.redhat.com / data/csaf/v2/vex/2025/cve-2025-13465.json
cert-portal.siemens.com / productcert/html/ssa-253495.html
github.com / lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg
Vendor Advisory