Threat database

Red Hat OpenShift Container Platform 4.19.28 includes a security update addressing a privilege escalation or arbitrary code execution vulnerability via malicious wheel file unpacking (CVE-2026-24049). This vulnerability affects the 'wheel' package and is rated as having an important security impact by Red Hat. Users of OpenShift Container Platform 4.19 are advised to upgrade to the updated packages and container images to mitigate this issue.

CVE-2025-13465 is a prototype pollution vulnerability in the Lodash library's _.unset and _.omit functions. This flaw allows an attacker who can control property paths to delete methods from global prototypes, potentially causing denial of service by removing essential functionalities. The vulnerability only permits deletion of properties, not overwriting behavior, limiting the impact to denial of service. It affects applications using these Lodash functions with user-controlled input for property paths. Red Hat Satellite includes Red Hat Lightspeed, which uses Lodash in the pcs-web-ui component; however, this component is no longer included in RHEL 8.10, which is therefore not affected. Mitigation involves strict input validation to block prototype chain access. No fix is currently provided in Red Hat Satellite, but the advisory provides guidance on mitigation.

Red Hat AMQ Broker 7.13.4 addresses a security vulnerability identified as CVE-2026-27446 in Apache Artemis, the underlying messaging server. The flaw involves message injection and exfiltration due to missing authentication controls. This update includes security fixes to prevent unauthorized message operations. The vulnerability is rated as having an important security impact by Red Hat.

A denial of service vulnerability exists in the Linux kernel due to a deadlock in hugetlb folio migration (CVE-2026-23097). This issue affects Red Hat Enterprise Linux 8 and related products. The vulnerability is rated as moderate severity by Red Hat Product Security. A security update is available and should be applied, requiring a system reboot to take effect.