CVE-2025-13465
Aliases:GHSA-xxjr-mmjv-4gpgGHSA-f23m-r3pf-42rhCVE-2026-2950RHSA-2026:2438RHSA-2026:2452RHSA-2026:2816RHSA-2026:2817RHSA-2026:2818RHSA-2026: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
Advisory lineage Upstream: 0 Downstream: 58
Modified
Published: 21 Jan 2026, 19:05
Last modified:14 Sept 2026, 12:04
Vulnerability Summary
Overall Risk (default)
medium
33/100 CVSS Score
8.2 HIGH
v3.1 (cve.org)
EPSS Score
1.78% LOW
2% probability +1.75%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
21 Jan 2026, 19:05
Published
Vulnerability first disclosed
14 Sept 2026, 12:04
Last Modified
Vulnerability information updated
Description
Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes. The issue permits deletion of properties but does not allow overwriting their original behavior. This issue is patched on 4.17.23
CVSS Metrics
- v4.0•MEDIUM•Score: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:H/SI:H/SA:H/E:P
- v4.0•MEDIUM•Score: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- v3.1•HIGH•Score: 8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
- v3.1•MEDIUM•Score: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- v3.1•MEDIUM•Score: 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
EPSS Trends
Current EPSS score: 1.78%• Percentile: 77%
Techniques & Countermeasures
- CWE-1321•Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.
Affected Systems
- chainguard•airflow-2
all
- chainguard•airflow-core-2
all
- chainguard•arangodb-3.11
< 3.11.14.3-r5 | < 3.11.14.2-r4
- chainguard•arangodb-3.12
< 3.12.7.2-r0 | < 3.12.7.2-r5
- chainguard•argo-workflows-ui-3.6
< 3.6.18-r0 | < 3.6.19-r5
- chainguard•argo-workflows-ui-3.7
< 3.7.8-r0 | < 3.7.13-r0
- chainguard•argo-workflows-ui-4.0
< 4.0.4-r0
- chainguard•code-server
< 4.112.0-r2
- chainguard•drupal-11.3
< 11.3.13-r3
- chainguard•foxx-cli
< 2.1.1-r6 | < 2.1.1-r3
- chainguard•gitlab-rails-ce-18.1
all
- chainguard•gitlab-rails-ce-18.10
all
- chainguard•gitlab-rails-ce-18.11
all
- chainguard•gitlab-rails-ce-18.5
all
- chainguard•gitlab-rails-ce-18.6
all
- chainguard•gitlab-rails-ce-18.7
all
- chainguard•gitlab-rails-ce-18.8
all
- chainguard•gitlab-rails-ce-18.9
all
- chainguard•gitlab-rails-ce-19.0
< 19.0.3-r1
- chainguard•gitlab-rails-ce-19.1
all | < 19.1.7-r6
- chainguard•gitlab-rails-ce-19.2
all | < 19.2.5-r2
- chainguard•gitlab-rails-ce-19.3
< 19.3.1-r6
- chainguard•gitlab-rails-ce-fips-18.1
all | < 18.1.6-r15
- chainguard•gitlab-rails-ce-fips-18.10
all
- chainguard•gitlab-rails-ce-fips-18.11
all
- chainguard•gitlab-rails-ce-fips-18.5
all
- chainguard•gitlab-rails-ce-fips-18.6
all
- chainguard•gitlab-rails-ce-fips-18.7
all
- chainguard•gitlab-rails-ce-fips-18.8
all
- chainguard•gitlab-rails-ce-fips-18.9
all
- chainguard•gitlab-rails-ce-fips-19.0
all
- chainguard•gitlab-rails-ce-fips-19.1
< 19.1.1-r1
- chainguard•jitsucom-jitsu-console
< 2.11.0-r12 | < 2.11.0-r19
- chainguard•json-server
< 0.17.4-r6 | < 0.17.4-r4
- chainguard•jupyter-base-notebook
all
- chainguard•katib-earlystopping
< 0.19.0-r31
- chainguard•katib-suggestion-goptuna-compat
all
- chainguard•katib-suggestion-hyperband
< 0.19.0-r31
- chainguard•katib-suggestion-hyperopt
< 0.19.0-r31 | < 0.19.0-r40
- chainguard•katib-suggestion-nas-darts
< 0.19.0-r31
- chainguard•katib-suggestion-nas-enas
< 0.19.0-r31
- chainguard•katib-suggestion-optuna-enas
< 0.19.0-r31
- chainguard•katib-suggestion-pbt-enas
< 0.19.0-r31
- chainguard•katib-suggestion-skopt-enas
< 0.19.0-r31
- chainguard•katib-tfevent-metricscollector
< 0.19.0-r31
- chainguard•kibana-7
all
- chainguard•kibana-8.17
< 8.17.10-r17 | < 8.17.10-r8
- chainguard•kibana-8.17-bitnami
< 8.17.10-r17
- chainguard•kibana-8.17-iamguarded
< 8.17.10-r17 | < 8.17.10-r8
- chainguard•kibana-8.18
all | < 8.18.8-r8
Showing first 50 affected entries in server-rendered view.
References (108)
- https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg
- https://nvd.nist.gov/vuln/detail/CVE-2025-13465
- https://github.com/lodash/lodash/commit/edadd452146f7e4bad4ea684e955708931d84d81
- https://github.com/lodash/lodash
- https://cert-portal.siemens.com/productcert/html/ssa-253495.html
- https://access.redhat.com/security/cve/CVE-2025-13465
- https://bugzilla.redhat.com/show_bug.cgi?id=2431740
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-13465.json
- https://access.redhat.com/errata/RHSA-2026:3958
- https://access.redhat.com/errata/RHSA-2026:1845
- https://access.redhat.com/errata/RHSA-2026:18480
- https://access.redhat.com/errata/RHSA-2026:24331
- https://access.redhat.com/errata/RHSA-2026:18868
- https://access.redhat.com/errata/RHSA-2026:4782
- https://access.redhat.com/errata/RHSA-2026:25089
- https://access.redhat.com/errata/RHSA-2026:2818
- https://access.redhat.com/errata/RHSA-2026:2438
- https://access.redhat.com/errata/RHSA-2026:2462
- https://access.redhat.com/errata/RHSA-2026:2469
- https://access.redhat.com/errata/RHSA-2026:2465
- https://access.redhat.com/errata/RHSA-2026:2484
- https://access.redhat.com/errata/RHSA-2026:2819
- https://access.redhat.com/errata/RHSA-2026:2817
- https://access.redhat.com/errata/RHSA-2026:2816
- https://access.redhat.com/errata/RHSA-2026:2452
- https://access.redhat.com/errata/RHSA-2026:2900
- https://access.redhat.com/errata/RHSA-2026:5633
- https://access.redhat.com/errata/RHSA-2026:8229
- https://access.redhat.com/errata/RHSA-2026:13548
- https://access.redhat.com/errata/RHSA-2026:13829
- https://access.redhat.com/errata/RHSA-2026:4466
- https://access.redhat.com/errata/RHSA-2026:4467
- https://access.redhat.com/errata/RHSA-2026:3962
- https://access.redhat.com/errata/RHSA-2026:3960
- https://access.redhat.com/errata/RHSA-2026:33154
- https://access.redhat.com/errata/RHSA-2026:4630
- https://access.redhat.com/errata/RHSA-2026:2675
- https://access.redhat.com/errata/RHSA-2026:2694
- https://access.redhat.com/errata/RHSA-2026:3782
- https://access.redhat.com/errata/RHSA-2026:19712
- https://access.redhat.com/errata/RHSA-2026:3870
- https://access.redhat.com/errata/RHSA-2026:3422
- https://access.redhat.com/errata/RHSA-2026:2990
- https://access.redhat.com/errata/RHSA-2026:15091
- https://access.redhat.com/errata/RHSA-2026:4423
- https://access.redhat.com/errata/RHSA-2026:14774
- https://access.redhat.com/errata/RHSA-2026:2661
- https://access.redhat.com/errata/RHSA-2026:20088
- https://access.redhat.com/errata/RHSA-2026:2672
- https://access.redhat.com/errata/RHSA-2026:21658
- https://access.redhat.com/errata/RHSA-2026:2078
- https://access.redhat.com/errata/RHSA-2026:20042
- https://access.redhat.com/errata/RHSA-2026:2651
- https://access.redhat.com/errata/RHSA-2026:17469
- https://access.redhat.com/errata/RHSA-2026:2119
- https://access.redhat.com/errata/RHSA-2026:2984
- https://access.redhat.com/errata/RHSA-2026:6192
- https://access.redhat.com/errata/RHSA-2026:3869
- https://access.redhat.com/errata/RHSA-2026:3874
- https://access.redhat.com/errata/RHSA-2026:3884
- https://access.redhat.com/errata/RHSA-2026:3710
- https://access.redhat.com/errata/RHSA-2026:3825
- https://access.redhat.com/errata/RHSA-2026:2145
- https://access.redhat.com/errata/RHSA-2026:2147
- https://access.redhat.com/errata/RHSA-2026:2148
- https://access.redhat.com/errata/RHSA-2026:2149
- https://access.redhat.com/errata/RHSA-2026:6497
- https://access.redhat.com/errata/RHSA-2026:6567
- https://access.redhat.com/errata/RHSA-2026:14870
- https://access.redhat.com/errata/RHSA-2026:14871
- https://access.redhat.com/errata/RHSA-2026:6288
- https://access.redhat.com/errata/RHSA-2026:2926
- https://access.redhat.com/errata/RHSA-2026:3087
- https://access.redhat.com/errata/RHSA-2026:13542
- https://access.redhat.com/errata/RHSA-2026:9848
- https://access.redhat.com/errata/RHSA-2026:5636
- https://access.redhat.com/errata/RHSA-2026:8218
- https://access.redhat.com/errata/RHSA-2026:11414
- https://access.redhat.com/errata/RHSA-2026:33371
- https://access.redhat.com/errata/RHSA-2026:34608
- https://access.redhat.com/errata/RHSA-2026:36882
- https://access.redhat.com/errata/RHSA-2026:36651
- https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh
- https://nvd.nist.gov/vuln/detail/CVE-2026-2950
- https://access.redhat.com/errata/RHSA-2026:34100
- https://access.redhat.com/errata/RHSA-2026:40138
- https://access.redhat.com/errata/RHSA-2026:40945
- https://access.redhat.com/errata/RHSA-2026:40118
- https://access.redhat.com/errata/RHSA-2026:40984
- https://access.redhat.com/errata/RHSA-2026:41064
- https://access.redhat.com/errata/RHSA-2026:41928
- https://access.redhat.com/errata/RHSA-2026:41941
- https://access.redhat.com/errata/RHSA-2026:41944
- https://access.redhat.com/security/updates/classification/#important
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2438.json
- https://www.cve.org/CVERecord?id=CVE-2025-13465
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2452.json
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2816.json
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2817.json
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2818.json
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2819.json
- https://ubuntu.com/security/CVE-2025-13465
- https://ubuntu.com/security/notices/USN-8411-1
- https://security-tracker.debian.org/tracker/CVE-2025-13465
- https://security-tracker.debian.org/tracker/CVE-2026-2950
- https://access.redhat.com/errata/RHSA-2026:57487
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2950.json
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13465.json