Skip to content
OpenAdvisories
High ELSA-2026-10710 1 CVE

Important: pcs security update (Oracle Linux 9)

Published Apr 26, 2026 · Updated Apr 26, 2026

Ecosystem: Oracle Linux

Summary

[0.11.10-1.el9_7.3]
- Fixed CVE-2026-4800 by updating pcs-web-ui to 0.1.23.2
Resolves: RHEL-164191

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 pcs 0:0.11.10-1.el9_7.3
Oracle Linux · 9 pcs-snmp 0:0.11.10-1.el9_7.3

Vulnerabilities 1

  • High 8.1
    CVE-2026-4800 Public exploit

    lodash vulnerable to Code Injection via `_.template` imports key names

    The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names, and both paths flow into the same Function() constructor sink. When an application passes untrusted input as …

    lodash lodash lodash-es lodash-amd Debian Ubuntu Wolfi npm