Summary
[0.11.10-1.el9_7.2]
- Fixed CVE-2025-13465 by updating pcs-web-ui to 0.1.23.1
Resolves: RHEL-144292
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | pcs | 0:0.11.10-1.el9_7.2 |
| Oracle Linux · 9 | pcs-snmp | 0:0.11.10-1.el9_7.2 |
Vulnerabilities 1
-
Medium 6.9CVE-2025-13465 Public exploit
Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions
The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes. The issue permits deletion of properties but does not allow overwriting their ori…