Security
فارسی
All products

OpenShift Lightspeed/openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9

Red Hat · Package
99 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
minimatch has potential denial of service via globparts amplificationCVE-2026-118764 · GHSA-G3HV-75WG-M249 minimatchCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Medium Fix reported
Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functionsCVE-2025-13465 · GHSA-XXJR-MMJV-4GPG lodash-amdlodash-es npmRed Hat Medium Fix reported
lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH lodash-amdlodash-es npmRed Hat Medium Fix reported
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversalCVE-2026-118773 · GHSA-3G3M-2FJR-6PW4 globCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Medium Fix reported
fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decodingCVE-2026-110306 · GHSA-W74X-V6F9-J3XG fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Medium Fix reported
fast-uri vulnerable to improper path equivalence in relative reference normalizationCVE-2026-110095 · GHSA-XHQ7-XMQJ-769H fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Low Fix reported
fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalizationCVE-2026-110180 · GHSA-WJR9-J795-JXCR fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Medium Fix reported
fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix referencesCVE-2026-110725 · GHSA-333X-W4R6-6CRP fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Low Fix reported
lodash vulnerable to Code Injection via `_.template` imports key namesCVE-2026-4800 · GHSA-R5FR-RJXR-66JC lodash-amdlodash-es npmRed Hat High Fix reported
shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` tokenCVE-2026-102422 · GHSA-PQG4-J6R4-53MV shell-quoteOpenShift Lightspeed/openshift-lightspeed/lightspeed-agentic-console-rhel9 npmRed Hat Critical Fix reported
source-map-js allows event-loop denial of service through indexed source-map section offsetsCVE-2026-93749 · GHSA-68FV-2MGG-JV7Q source-map-jsNode HealthCheck Operator/redhat-user-workloads/nhc-bundle-0-9 npmRed Hat High Fix reported
compression vulnerable to Denial of Service via memory leak on premature response closeCVE-2026-87776 · GHSA-VC2V-76PW-4V95 compressionNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High Fix reported
DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.CVE-2026-66010 · GHSA-C2J3-45GR-MQC4 dompurifyCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Low Fix reported
fast-uri vulnerable to inconsistent host case normalization via percent-encoded octetsCVE-2026-86472 · GHSA-HRR3-GC8F-F4QJ fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Medium Fix reported
fast-uri vulnerable to authority injection via an unvalidated port in serializeCVE-2026-84292 · GHSA-QW65-CVWX-89V3 fast-uriOpenShift Lightspeed/openshift-lightspeed/lightspeed-agentic-console-rhel9 npmRed Hat High Fix reported
fast-uri vulnerable to host confusion via an unclosed bracket in the URI authorityCVE-2026-84394 · GHSA-58MR-GQGX-XQ4G fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat High Fix reported
Immutable.js `List` 32-bit trie overflow → unrecoverable DoSCVE-2026-59879 · GHSA-V56Q-MH7H-F735 immutableLogging Subsystem for Red Hat OpenShift/openshift-logging/logging-view-plugin-rhel9 npmRed Hat High Fix reported
fast-uri vulnerable to host confusion via failed IDN canonicalizationCVE-2026-13676 · GHSA-4C8G-83QW-93J6 fast-uriConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat High Fix reported
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative referencesCVE-2026-75931 · GHSA-5JGF-P345-68V8 fast-uriOpenShift Lightspeed/openshift-lightspeed/lightspeed-agentic-console-rhel9 npmRed Hat High Fix reported
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalizationCVE-2026-75975 · GHSA-F65P-4M7J-42XC fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat High Fix reported