https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 13:23:35 +0000 https://vulnerability.circl.lu/vuln/bdu:2026-14791 bdu:2026-14791 https://vulnerability.circl.lu/vuln/bdu:2026-14791 https://vulnerability.circl.lu/vuln/cve-2025-13465 <p><strong>Affected:</strong> Lodash, Lodash-amd, lodash-es, lodash.unset, Siemens RUGGEDCOM RST2428P, Red Hat Cryostat 4 on RHEL 9, Red Hat HawtIO HawtIO 4.4.0, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Data Grid 8.6.0, Red Hat Enterprise Linux 10 and 111 more</p> <p>Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.</p> <p>The issue permits deletion of properties but does not allow overwriting their original behavior.</p> <p>This issue is patched on 4.17.23</p> <p><strong>Affected:</strong> Lodash, Lodash-amd, lodash-es, lodash.unset, Siemens RUGGEDCOM RST2428P, Red Hat Cryostat 4 on RHEL 9, Red Hat HawtIO HawtIO 4.4.0, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Data Grid 8.6.0, Red Hat Enterprise Linux 10 and 111 more</p> <p>Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.</p> <p>The issue permits deletion of properties but does not allow overwriting their original behavior.</p> <p>This issue is patched on 4.17.23</p> https://vulnerability.circl.lu/vuln/cve-2025-13465