CVE-2025-13465 | Lodash up to 4.17.22 Paths _.unset/_.omit prototype pollution (GHSA-xxjr-mmjv-4gpg)

A vulnerability was found in Lodash up to 4.17.22. It has been classified as critical. This vulnerability affects the function _.unset/_.omit of the component Paths Handler. This manipulation causes improperly controlled modification of object prototype attributes.

This vulnerability is registered as CVE-2025-13465. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.