The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit     functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.
    The issue permits deletion of properties but does not allow overwriting their original behavior. This     issue is patched on 4.17.23 (CVE-2025-13465)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-13465

high Nessus Plugin ID 294906

Version 1.18