Skip to content
OpenAdvisories
High ELSA-2026-2452 1 CVE

Important: pcs security update (Oracle Linux 9)

Published Feb 10, 2026 · Updated Feb 10, 2026

Summary

[0.11.10-1.el9_7.2]
- Fixed CVE-2025-13465 by updating pcs-web-ui to 0.1.23.1
Resolves: RHEL-144292

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 pcs 0:0.11.10-1.el9_7.2
Oracle Linux · 9 pcs-snmp 0:0.11.10-1.el9_7.2

Vulnerabilities 1

  • Medium 6.9
    CVE-2025-13465 Public exploit

    Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

    The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes. The issue permits deletion of properties but does not allow overwriting their ori…