K000162352: Lodash vulnerability CVE-2026-4800

Security Advisory Description Impact: The fix for CVE-2021-23337 https://github.com/advisories/GHSA-35jh-r3h4-6jhm added validation for the variable option in .template but did not apply the same validation to options.imports key names. Both paths flow into the same Function constructor sink. Whe...

RLSA-2026:19167 Important: pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: lodash: lodash: Arbitrary code execution via untrusted input in template imports CVE-2026-4800 For more details about the security issues, including the impact, a CVSS score,...

RHEL 10 : pcs (RHSA-2026:10713)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:10713 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: lodash: lodash: Arbitrary co...

Fedora 42 : yarnpkg (2026-7a6943e57d)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7a6943e57d advisory. Refresh vendor bundle, fixes CVE-2026-4800. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

CVE-2026-4800 vulnerabilities

Vulnerabilities for packages: code-server, json-server, kubeflow-katib, opensearch-dashboards, renovate, npm, prism, kubeflow-pipelines, langfuse, jitsucom-jitsu, kubeflow-centraldashboard, sqlpad, vitess, ts-patch, py3-jupyterlab, argo-workflows, saf...

Linux Distros Unpatched Vulnerability : CVE-2026-4800

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Impact: The fix for CVE-2021-23337 https://github.com/advisories/GHSA-35jh-r3h4-6jhm added validation for the variable option in .template but did not apply the...