Vulnerabilities CVE-2025-13465

CVE-2025-13465

Medium

Open

TLP:CLEAR

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes. The issue permits deletion of properties but does not allow overwriting their original behavior. This issue is patched on 4.17.23

Details

CVSS Score: 6.9
EPSS Score ⓘ: 1.54%

72.5th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:H/SI:H/SA:H/E:P
Confidence: 90%
Published: Jan 21, 2026
Last Modified: Aug 12, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.