CVE-2025-13465

EUVD-2025-206319
Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.

The issue permits deletion of properties but does not allow overwriting their original behavior.

This issue is patched on 4.17.23
Prototype Pollution
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 73.72%
Affected Products (NVD)
VendorProductVersion
lodashlodash
4.0.0 ≤
𝑥
< 4.17.23
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
SiemensRUGGEDCOM RST2428P
𝑥
< V4.0
ADP
Red HatCryostat 4 on RHEL 9
4.1.0-17 ≤
𝑥
< *
ADP
Red HatCryostat 4 on RHEL 9
4.1.0-17 ≤
𝑥
< *
ADP
Red HatRed Hat Ansible Automation Platform 2.6 for RHEL 9
0:2.6.6-1.el9ap ≤
𝑥
< *
ADP
Red HatRed Hat Data Grid 8.6.0
infinispan-console ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:0.12.1-1.el10_1.2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:2.26-7.el10 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:94.3-1.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
0:0.12.0-3.el10_0.4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
0:0.10.8-1.el8_4.10 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
0:0.10.8-1.el8_4.10 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
0:0.10.12-6.el8_6.12 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
0:0.10.12-6.el8_6.12 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
0:0.10.15-4.el8_8.10 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
0:0.10.15-4.el8_8.10 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:2.26-7.el9 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:0.11.10-1.el9_7.2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
0:0.11.1-10.el9_0.10 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
0:0.11.4-7.el9_2.7 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
0:0.11.7-2.el9_4.6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
0:0.11.9-2.el9_6.3 ≤
𝑥
< *
ADP
Red HatRed Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
0:7.3.18-3.GA_redhat_00001.1.el7eap ≤
𝑥
< *
ADP
Red HatCluster Observability Operator 1.4.0
1773337158 ≤
𝑥
< *
ADP
Red HatCluster Observability Operator 1.4.0
1773337078 ≤
𝑥
< *
ADP
Red Hatmulticluster engine for Kubernetes 2.10
1777128790 ≤
𝑥
< *
ADP
Red Hatmulticluster engine for Kubernetes 2.6
1776223790 ≤
𝑥
< *
ADP
Red Hatmulticluster engine for Kubernetes 2.7
1773100128 ≤
𝑥
< *
ADP
Red Hatmulticluster engine for Kubernetes 2.8
1775116156 ≤
𝑥
< *
ADP
Red Hatmulticluster engine for Kubernetes 2.9
1777301444 ≤
𝑥
< *
ADP
Red HatNetwork Observability \(NETOBSERV\) 1.11.0
1771227610 ≤
𝑥
< *
ADP
Red HatNetwork Observability \(NETOBSERV\) 1.11.0
1771227650 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.11
1783350952 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.12
1773259174 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.13
1775116130 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.14
1783451729 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.15
1776927126 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Security 4.8
1773235880 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Security 4.9
1773235860 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Security for Kubernetes 4.10
1777976489 ≤
𝑥
< *
ADP
Red HatRed Hat Ansible Automation Platform 2.5
1772214630 ≤
𝑥
< *
ADP
Red HatRed Hat Ansible Automation Platform 2.6
1772543959 ≤
𝑥
< *
ADP
Red HatRed Hat Ansible Automation Platform 2.6
1772552788 ≤
𝑥
< *
ADP
Red HatRed Hat Ceph Storage 7.1
1781863705 ≤
𝑥
< *
ADP
Red HatRed Hat Developer Hub 1.8
1770656494 ≤
𝑥
< *
ADP
Red HatRed Hat Discovery 2
1770913709 ≤
𝑥
< *
ADP
Red HatRed Hat Edge Manager 1.0
1783502765 ≤
𝑥
< *
ADP
Red HatRed Hat Edge Manager 1.0
1783502438 ≤
𝑥
< *
ADP
Red HatRed Hat Edge Manager 1.1
1784194938 ≤
𝑥
< *
ADP
Red HatRed Hat Edge Manager 1.1
1784194574 ≤
𝑥
< *
ADP
Red HatRed Hat Edge Manager 1.1
1784126822 ≤
𝑥
< *
ADP
Red HatRed Hat Edge Manager 1.1
1784127736 ≤
𝑥
< *
ADP
Red HatRed Hat Migration Toolkit 1.8
1783690532 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1772093424 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1772093498 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1779189627 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1778473763 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1778666987 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.12
1772633840 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.13
1771854568 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.14
1778036641 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.14
1771425150 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.15
1777994844 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.15
1773067104 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.16
1779262817 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.16
1770831186 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.17
1770775465 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.17
1782269794 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.18
1770235261 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.18
1779874967 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.19
1779249920 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.19
1770665886 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.20
1778645008 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.20
1769816382 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.21
1771393951 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1783676191 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1783929816 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1784094353 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1784093953 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1784094943 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1783676585 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1783676649 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1783676675 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1784094299 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1784094725 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1783676820 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1783676883 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1783676894 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1784095175 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1783676977 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1784093503 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1783677297 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1783677345 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.18
1783677533 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1783684360 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1783684068 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1784054582 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1784054606 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1784055295 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1783684603 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1783684668 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1783684667 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1784054873 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1783684707 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1784055589 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1783684779 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1783684831 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1783684839 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1784055533 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1784055558 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1784056134 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1783685128 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1783685129 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.19
1783685375 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1783667125 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1783666755 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1784054598 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1784055387 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1784055726 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1783667517 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1783667577 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1783667611 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1784055020 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1783667641 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1784055586 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1783667790 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1783667859 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1783667875 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1783667869 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1783667877 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1784055576 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1784055244 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1784055382 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1783668266 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1783668288 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.20
1783669219 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Dev Spaces 3.27
1774448966 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Dev Spaces 3.27
1774476526 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Dev Spaces 3.27
1773775064 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Dev Spaces 3.27
1774227265 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift GitOps 1.17
1772195995 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift GitOps 1.18
1772439154 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift GitOps 1.18
1772438822 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift GitOps 1.19
1772447156 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Pipelines 1.15
1772110573 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Pipelines 1.2
1770988020 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Service Mesh 2.6
1770140426 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Service Mesh 2.6
1770140470 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Service Mesh 3.0
1770140791 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Service Mesh 3.0
1770140853 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Service Mesh 3.1
1770140180 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Service Mesh 3.1
1770138727 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Service Mesh 3.2
1770142326 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Service Mesh 3.2
1770138513 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.16
1775069491 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.16
1775169226 ≤
𝑥
< *
ADP
Red HatRed Hat Satellite 6.18
1777911535 ≤
𝑥
< *
ADP
Red HatRed Hat Satellite 6.18
1777498806 ≤
𝑥
< *
ADP
Red HatRed Hat Satellite 6.18
1773242477 ≤
𝑥
< *
ADP
Red HatRed Hat Trusted Artifact Signer 1.2
1770739056 ≤
𝑥
< *
ADP
Red HatRed Hat Trusted Artifact Signer 1.3
1771324807 ≤
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
node-lodash
bookworm
no-dsa
bullseye
vulnerable
bullseye (security)
4.17.21+dfsg+~cs8.31.173-1+deb11u1
fixed
forky
4.18.1+dfsg-3
fixed
sid
4.18.1+dfsg1-2
fixed
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
node-lodash
bionic
Fixed 4.17.4+dfsg-1ubuntu0.1~esm1
released
focal
Fixed 4.17.15+dfsg-2ubuntu0.1~esm1
released
jammy
Fixed 4.17.21+dfsg+~cs8.31.198.20210220-5ubuntu0.1~esm1
released
noble
Fixed 4.17.21+dfsg+~cs8.31.198.20210220-9ubuntu0.24.04.1~esm1
released
questing
Fixed 4.17.21+dfsg+~cs8.31.198.20210220-9ubuntu0.25.10.1
released
resolute
not-affected
xenial
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
golang-github-prometheus-node_exporter
suse enterprise server 15 SP4
1.9.1-150100.3.38.1
fixed
suse enterprise server 15 SP5
1.9.1-150100.3.38.1
fixed
suse enterprise server 15 SP6
1.9.1-150100.3.38.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
pcs
RHEL 8.4 AUS
0:0.10.8-1.el8_4.10
fixed
RHEL 8.6 E4S
0:0.10.12-6.el8_6.12
fixed
RHEL 8.6 TUS
0:0.10.12-6.el8_6.12
fixed
RHEL 8.8 E4S
0:0.10.15-4.el8_8.10
fixed
RHEL 8.8 TUS
0:0.10.15-4.el8_8.10
fixed
RHEL 9
0:0.11.10-1.el9_7.2
fixed
pcs-snmp
RHEL 8.4 AUS
0:0.10.8-1.el8_4.10
fixed
RHEL 8.6 E4S
0:0.10.12-6.el8_6.12
fixed
RHEL 8.6 TUS
0:0.10.12-6.el8_6.12
fixed
RHEL 8.8 E4S
0:0.10.15-4.el8_8.10
fixed
RHEL 8.8 TUS
0:0.10.15-4.el8_8.10
fixed
RHEL 9
0:0.11.10-1.el9_7.2
fixed
sgx-common
RHEL 9
0:2.26-7.el9
fixed
sgx-libs
RHEL 9
0:2.26-7.el9
fixed
sgx-mpa
RHEL 9
0:2.26-7.el9
fixed
sgx-pccs
RHEL 9
0:2.26-7.el9
fixed
sgx-pccs-admin
RHEL 9
0:2.26-7.el9
fixed
sgx-pckid-tool
RHEL 9
0:2.26-7.el9
fixed
tdx-qgs
RHEL 9
0:2.26-7.el9
fixed
References