Skip to content
OpenAdvisories
High ELSA-2026-10713 1 CVE

Important: pcs security update (Oracle Linux 10)

Published Apr 28, 2026 · Updated Apr 28, 2026

Ecosystem: Oracle Linux

Summary

[0.12.1-1.el10_1.3]
- Fixed CVE-2026-4800 by updating HA Cluster Management add-on to 0.1.23.2
Resolves: RHEL-164062

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 10 cockpit-ha-cluster 0:0.12.1-1.el10_1.3
Oracle Linux · 10 pcs 0:0.12.1-1.el10_1.3
Oracle Linux · 10 pcs-snmp 0:0.12.1-1.el10_1.3

Vulnerabilities 1

  • High 8.1
    CVE-2026-4800 Public exploit

    lodash vulnerable to Code Injection via `_.template` imports key names

    The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names, and both paths flow into the same Function() constructor sink. When an application passes untrusted input as …

    lodash lodash lodash-es lodash-amd Debian Ubuntu Wolfi npm