Skip to content
OpenAdvisories
High ELSA-2026-19167 1 CVE

Important: pcs security update (Oracle Linux 9)

Published Jun 23, 2026 · Updated Jun 23, 2026

Ecosystem: Oracle Linux

Summary

[0.11.11-2.el9_8.1]
- Fixed CVE-2026-4800 by updating pcs-web-ui to 0.1.24.3
Resolves: RHEL-164206

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 pcs 0:0.11.11-2.el9_8.1
Oracle Linux · 9 pcs-snmp 0:0.11.11-2.el9_8.1

Vulnerabilities 1

  • High 8.1
    CVE-2026-4800 Public exploit

    lodash vulnerable to Code Injection via `_.template` imports key names

    The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names, and both paths flow into the same Function() constructor sink. When an application passes untrusted input as …

    lodash lodash lodash-es lodash-amd Debian Ubuntu Wolfi npm